GHSA-29c2-65rj-h343
Nervos CKB Permit load cell data from memory
Impact
The faulty nodes will reject transactions which calls load_cell_data syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation.
Patches
0.35.2, 0.36.1, 0.37.1, 0.38.2
What each source reports
GitHub AdvisoriesNo score
Nervos CKB Permit load cell data from memory
Impact
The faulty nodes will reject transactions which calls load_cell_data syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation.
Patches
0.35.2, 0.36.1, 0.37.1, 0.38.2
- Record
GHSA-29c2-65rj-h343- Updated
- 2026-11-02
OSVNo score
Nervos CKB Permit load cell data from memory
Impact
The faulty nodes will reject transactions which calls load_cell_data syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation.
Patches
0.35.2, 0.36.1, 0.37.1, 0.38.2
- Record
GHSA-29c2-65rj-h343- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-29c2-65rj-h343 is a vulnerability with no CVSS score yet in ckb, published February 3, 2024. No source lists public exploit code. Fixed in ckb 0.39.0.
References
github.com/nervosnetwork/ckb/security/advisories/GHSA-29c2-65rj-h343