Nervos CKB Permit load cell data from memory
Priority LOW 38Published · Updated
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- —
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub.
Summary
### Impact The faulty nodes will reject transactions which calls `load_cell_data` syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation. ### Patches 0.35.2, 0.36.1, 0.37.1, 0.38.2
Why it matters now
Fix Fixed ckb (crates.io): 0.39.0, 0.35.2, 0.36.1 +2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | ckb (crates.io) | 0.39.0-rc1 to before 0.39.0 | 0.39.0 | Patch available | GHSA-29c2-65rj-h343 |
| — | ckb (crates.io) | 0.35.0-rc1 to before 0.35.2 | 0.35.2 | Patch available | GHSA-29c2-65rj-h343 |
| — | ckb (crates.io) | 0.36.0-rc1 to before 0.36.1 | 0.36.1 | Patch available | GHSA-29c2-65rj-h343 |
| — | ckb (crates.io) | 0.37.0-rc1 to before 0.37.1 | 0.37.1 | Patch available | GHSA-29c2-65rj-h343 |
| — | ckb (crates.io) | 0.38.0-rc1 to before 0.38.2 | 0.38.2 | Patch available | GHSA-29c2-65rj-h343 |
- ckb (crates.io) Vendor— Affected 0.39.0-rc1 to before 0.39.0 Fixed in 0.39.0 Patch available GHSA-29c2-65rj-h343
- ckb (crates.io) Vendor— Affected 0.35.0-rc1 to before 0.35.2 Fixed in 0.35.2 Patch available GHSA-29c2-65rj-h343
- ckb (crates.io) Vendor— Affected 0.36.0-rc1 to before 0.36.1 Fixed in 0.36.1 Patch available GHSA-29c2-65rj-h343
- ckb (crates.io) Vendor— Affected 0.37.0-rc1 to before 0.37.1 Fixed in 0.37.1 Patch available GHSA-29c2-65rj-h343
- ckb (crates.io) Vendor— Affected 0.38.0-rc1 to before 0.38.2 Fixed in 0.38.2 Patch available GHSA-29c2-65rj-h343
Remediation
- Fix · GHSA-29c2-65rj-h343 ckb (crates.io) Fixed in 0.39.0 Advisory →
- Fix · GHSA-29c2-65rj-h343 ckb (crates.io) Fixed in 0.35.2 Advisory →
- Fix · GHSA-29c2-65rj-h343 ckb (crates.io) Fixed in 0.36.1 Advisory →
- Fix · GHSA-29c2-65rj-h343 ckb (crates.io) Fixed in 0.37.1 Advisory →
- Fix · GHSA-29c2-65rj-h343 ckb (crates.io) Fixed in 0.38.2 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-29c2-65rj-h343
References
Other 6
- https://github.com/nervosnetwork/ckb/security/advisories/GHSA-29c2-65rj-h343
- https://github.com/nervosnetwork/ckb/commit/277061867eb7d2766fa6737c8bf00684fc2462a6
- https://github.com/nervosnetwork/ckb/commit/37d60d581c6713d3aca1a57018eaea45447ae0b2
- https://github.com/nervosnetwork/ckb/commit/8f115b387f8f60f938bce4591f26cd78430b8771
- https://github.com/nervosnetwork/ckb/commit/91efb7b6b4329d70d60eee91d5239a2de9b0d99f
- https://github.com/nervosnetwork/ckb/commit/97647408ee9dbf525f6c678796e770887c9f8738
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences