CVE-2026-42801

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42801", "assignerOrgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "state": "PUBLISHED", "assignerShortName": "ASR", "dateReserved": "2026-04-30T07:55:02.475Z", "datePublished": "2026-09-23T09:03:56.690Z", "dateUpdated": "2026-09-23T15:25:17.517Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "shortName": "ASR", "dateUpdated": "2026-09-23T09:03:56.690Z"}, "title": "Deference after null check in as_rrc", "datePublic": "2026-09-23T08:41:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "affected": [{"vendor": "ASR", "product": "Crane\uff0cFalcon", "platforms": ["Linux"], "modules": ["as_rrc"], "programFiles": ["3g.mod/lib/src/urrsir.c"], "versions": [{"status": "unaffected", "version": "0", "lessThan": "2026/9/20", "versionType": "date"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.<p>This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.</p>"}]}], "references": [{"url": "https://www.asrmicro.com/en/goods/psirt?cid=45"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseSeverity": "HIGH", "baseScore": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-23T15:25:08.195447Z", "id": "CVE-2026-42801", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-23T15:25:17.517Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42801", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-23T15:25:08.195447Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-23T15:25:13.747Z"}}], "cna": {"title": "Deference after null check in as_rrc", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ASR", "modules": ["as_rrc"], "product": "Crane\uff0cFalcon", "versions": [{"status": "unaffected", "version": "0", "lessThan": "2026/9/20", "versionType": "date"}], "platforms": ["Linux"], "programFiles": ["3g.mod/lib/src/urrsir.c"], "defaultStatus": "unaffected"}], "datePublic": "2026-09-23T08:41:00.000Z", "references": [{"url": "https://www.asrmicro.com/en/goods/psirt?cid=45"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.", "supportingMedia": [{"type": "text/html", "value": "NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.<p>This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference"}]}], "providerMetadata": {"orgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "shortName": "ASR", "dateUpdated": "2026-09-23T09:03:56.690Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42801", "state": "PUBLISHED", "dateUpdated": "2026-09-23T15:25:17.517Z", "dateReserved": "2026-04-30T07:55:02.475Z", "assignerOrgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "datePublished": "2026-09-23T09:03:56.690Z", "assignerShortName": "ASR"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["as_rrc"], "platforms": ["Linux"], "product": "Crane\uff0cFalcon", "programFiles": ["3g.mod/lib/src/urrsir.c"], "vendor": "ASR", "versions": [{"lessThan": "2026/9/20", "status": "unaffected", "version": "0", "versionType": "date"}]}], "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c."}], "id": "CVE-2026-42801", "lastModified": "2026-09-23T17:58:00.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 3.7, "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42801", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-23T15:25:08.195447Z", "version": "2.0.3"}}]}, "published": "2026-09-23T09:17:08.727", "references": [{"source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "url": "https://www.asrmicro.com/en/goods/psirt?cid=45"}], "sourceIdentifier": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "type": "Secondary"}]}

{"bugzilla": {"description": "ASR Crane: Falcon: as_rrc: 3g.mod: ASR Crane, Falcon: NULL pointer dereference allows pointer manipulation", "id": "2539274", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539274"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.4", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-476", "details": ["NULL pointer dereference vulnerability in ASR Crane\uff0cFalcon on Linux (as_rrc module) allows Pointer Manipulation.\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.", "A flaw was found in ASR Crane and Falcon. This vulnerability, located in the `as_rrc` module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-42801", "package_state": [{"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Not affected", "package_name": "python-falcon", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Affected", "package_name": "rhosp-rhel8/openstack-zaqar-wsgi", "product_name": "Red Hat OpenStack Platform 16.2"}], "public_date": "2026-09-23T09:03:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-42801\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-42801\nhttps://www.asrmicro.com/en/goods/psirt?cid=45"], "statement": "This vulnerability is rated as Important because improper pointer handling in cellular communication stacks can allow network-adjacent or protocol-level manipulation that compromises service availability. Exploitation requires specialized hardware running proprietary ASR Microelectronics cellular baseband software, which is not shipped or supported in standard Red Hat enterprise environments. Additionally, this flaw is confined to ASR modem chipsets and does not affect the unrelated python-falcon web framework packages.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": ["linux"], "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,2026/9/20)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Crane\uff0cFalcon", "source": "cna", "vendor": "ASR"}, "product": "crane,falcon", "vendor": "asr"}], "created": "2026-09-23T14:30:06.232983+00:00", "updated": "2026-09-23T15:36:55.698632+00:00", "vendors": ["asr", "asr$PRODUCT$crane,falcon"]}