Nixpkgs security tracker

Try the new UI
Login with GitHub

Details of issue NIXPKGS-2026-2674

NIXPKGS-2026-2674
published 4 hours ago
Reachable assertion at ranap_handle_co_dt()
Permalink CVE-2026-75894
updated 4 hours ago by @LeSuisse Activity log
  • Created suggestion 12 hours ago
  • @LeSuisse accepted 4 hours ago
  • @LeSuisse published on GitHub 4 hours ago
Reachable assertion at ranap_handle_co_dt()

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Affected products

osmo-iuh
  • <1.8.0

Matching in nixpkgs

pkgs.osmo-iuh

Osmocom IuH library

  • nixos-unstable -
    • nixos-unstable-small 1.6.0
  • nixos-26.05 -
    • nixos-26.05-small 1.6.0