CVE-2025-65564: Pfcp Silent Drop On Ie Parse Error

Returning a `nil` response when a PFCP Information Element (IE) fails to parse causes the UPF to silently drop the request instead of sending a proper rejection. This can lead to state inconsistency and denial-of-service (timeouts) for the peering node. Instead of returning `nil`, construct and return a valid response containing an appropriate rejection caus

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0go
greprules fetch cve-2025-65564-pfcp-silent-drop-on-ie-parse-error --engine opengrep

Description

Returning a `nil` response when a PFCP Information Element (IE) fails to parse causes the UPF to silently drop the request instead of sending a proper rejection. This can lead to state inconsistency and denial-of-service (timeouts) for the peering node. Instead of returning `nil`, construct and return a valid response containing an appropriate rejection caus

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.