A critical denial of service vulnerability in the OpenAirInterface V2.2.0 AMF allows unauthenticated attackers to crash the service via malformed network inputs.

The Access and Mobility Management Function (AMF) component fails to properly handle decoding errors when processing incoming messages. An unauthenticated attacker can trigger a consistent service crash by sending a specific crafted hexadecimal stream.

The vulnerability carries a CVSS score of 7.5, reflecting a High severity rating due to the ease of exploitation. Successful exploitation results in a complete denial of service for the affected AMF, which can disrupt critical 5G core network signaling and connectivity for all associated user equipment.

Immediate Action: Review the provided vendor merge requests and implementation guidance at the OAI GitLab repository to identify the necessary code-level fixes for the AMF decoding logic.

Proactive Monitoring: Implement network-level monitoring to detect and alert on anomalous or malformed signaling traffic directed toward the AMF interface.

Compensating Controls: Deploy a protocol-aware firewall or ingress filter capable of validating message structures before they reach the AMF to drop malformed packets.

Public Exploit Available: No confirmed public exploit (weaponized or otherwise) exists in the provided data.

Given the potential for service disruption in core network infrastructure, administrators should prioritize evaluating the fix provided in the OAI merge request. Until a formal patch is applied, network perimeter defenses should be hardened to validate incoming signaling traffic and mitigate the risk of remote service termination.