Suse CVE-2026-32937

Apply the patch available in pull request https://github.com/free5gc/chf/pull/61 or upgrade to a version containing commit 55af766f321a00afa978e806548c96f8a7d2433e which addresses the out-of-bounds slice access vulnerability. Review the vendor security advisory at https://github.com/free5gc/free5gc/security/advisories/GHSA-6g43-577r-wf4x for complete remediation guidance. Until patching is feasible, implement the following compensating controls: restrict network access to the nchf-convergedcharging recharge endpoint using firewall rules or network ACLs to allow only strictly trusted network function callers, apply rate limiting at reverse proxy or API gateway layers to mitigate repeated panic-trigger attempts, and if recharge functionality is not actively required, temporarily disable or block external access to the /nchf-convergedcharging/v3/recharging route. Ensure panic recovery middleware is enabled and configure comprehensive monitoring with alerting on HTTP 500 errors and panic log patterns to detect exploitation attempts. Validate that authentication mechanisms for CHF SBI interfaces follow principle of least privilege and rotate any credentials that may have been exposed to untrusted parties.