NULL Pointer Dereference in ASR Crane, Falcon on Linux
CVE-2026-42801

7.4HIGH

Key Information:

Vendor

Asr

Status
Crane，falcon
Vendor
CVE Published:
23 September 2026

What is CVE-2026-42801?

A NULL pointer dereference vulnerability exists in ASR Crane and Falcon on Linux, specifically in the as_rrc module. This flaw allows for pointer manipulation through the program file 3g.mod/lib/src/urrsir.c, potentially leading to unexpected behaviors or crashes within the affected systems. Users of these products should be aware of the implications this vulnerability presents and take necessary precautions.

Affected Version(s)

Crane，Falcon Linux 0

References

https://www.asrmicro.com/en/goods/psirt?cid=45

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.