Detections
Analytics

SCA: security update for github.com/free5gc/bsf (GHSA-27ph-8q4f-h7m7)

medium Tenable Cloud Security Plugin ID 441587

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-
 management/v1/subscriptions/{subId} handler has an unsynchronized write on the global Subscriptions map.
 The handler first reads the map under RLock() via BSFContext.GetSubscription(subId), but if the
 subscription does not exist, ReplaceIndividualSubcription() writes back to the same map directly without
 taking the mutex (bsfContext.BsfSelf.Subscriptions[subId] = subscription). Under concurrent authenticated
 PUT load, one goroutine can read while another writes the map, which causes the Go runtime to abort the
 process with fatal error: concurrent map read and map write (Go runtime panics that come from concurrent
 map access bypass recover() and terminate the process). The BSF container exits with code 2 -- the entire
 BSF SBI surface goes down until restart. This vulnerability is fixed in 4.2.2. (CVE-2026-44318)

Solution

Update the github.com/free5gc/bsf library and its related packages to version 1.0.2 or later.

See Also

https://github.com/advisories/GHSA-27ph-8q4f-h7m7

Plugin Details

Severity: Medium

ID: 441587

Version: Revision 1.8

Type: Local

Family: SCA Checks

Published: 5/9/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5.7

Percentile: 96.49

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 4.9

Temporal Score: 3.8

Vector: CVSS2#AV:N/AC:H/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-44318

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.8

Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/8/2026

Vulnerability Publication Date: 5/8/2026

Reference Information

CVE: CVE-2026-44318