CVE-2024-24420
📋 TL;DR
A reachable assertion vulnerability in Magma's decode_linked_ti_ie function allows attackers to cause Denial of Service (DoS) by sending crafted NAS packets. This affects Magma versions up to 1.8.0, potentially disrupting cellular network services.
💻 Affected Systems
- Magma
📦 What is this software?
Magma by Linuxfoundation
⚠️ Risk & Real-World Impact
Worst Case
Complete service disruption of Magma-based cellular networks, affecting voice, data, and messaging services for connected devices.
Likely Case
Service instability and intermittent outages in affected Magma deployments, requiring manual intervention to restore functionality.
If Mitigated
Minimal impact with proper network segmentation and monitoring, allowing quick detection and response to attack attempts.
🎯 Exploit Status
Exploitation requires sending crafted NAS packets to the vulnerable Magma instance, which may require network access and protocol knowledge.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.9 (commit 08472ba98b8321f802e95f5622fa90fec2dea486)
Vendor Advisory: https://cellularsecurity.org/ransacked
Restart Required: No
Instructions:
1. Update Magma to version 1.9 or later. 2. Apply commit 08472ba98b8321f802e95f5622fa90fec2dea486 if using custom builds. 3. Verify the fix is applied by checking the version.
🔧 Temporary Workarounds
Network Segmentation
allRestrict access to Magma services to trusted networks only
Rate Limiting
allImplement rate limiting on NAS packet processing to reduce DoS impact
🧯 If You Can't Patch
- Implement strict network access controls to limit who can send packets to Magma services
- Deploy intrusion detection systems to monitor for abnormal NAS packet patterns
🔍 How to Verify
Check if Vulnerable:
Check Magma version: if version <= 1.8.0, the system is vulnerableCheck Version:
magma versionVerify Fix Applied:
Verify Magma version is >= 1.9 or includes commit 08472ba98b8321f802e95f5622fa90fec2dea486📡 Detection & Monitoring
Log Indicators:
- Magma process crashes or restarts
- Assertion failures in decode_linked_ti_ie function logs
- Unusual NAS packet processing errors
Network Indicators:
- Abnormal volume of NAS packets from single sources
- Malformed NAS packets targeting Magma services
SIEM Query:
source="magma" AND ("assertion" OR "crash" OR "decode_linked_ti_ie")