REDHAT-BUG-2335206
First published: Wed Jan 01 2025(Updated: )
Summary: The server crashes when a new Saga Join request is received within 2 seconds of the LRA Coordinator starting to cancel and the status is still "Canceling." Description: When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may hang indefinitely or crash. References: <a href="https://github.com/jbosstm/narayana/pull/2293">https://github.com/jbosstm/narayana/pull/2293</a> <a href="https://issues.redhat.com/browse/JBTM-3911">https://issues.redhat.com/browse/JBTM-3911</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Narayana |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2335206?
The severity of REDHAT-BUG-2335206 is categorized as high due to its potential to cause server crashes.
How do I fix REDHAT-BUG-2335206?
To fix REDHAT-BUG-2335206, update the Red Hat Narayana software to the latest version where the issue is addressed.
What is the impact of REDHAT-BUG-2335206 on the system?
The impact of REDHAT-BUG-2335206 includes server instability and potential downtime when handling Cancel and Join requests simultaneously.
Can REDHAT-BUG-2335206 affect production environments?
Yes, REDHAT-BUG-2335206 can significantly affect production environments by leading to application failures.
Is there a workaround for REDHAT-BUG-2335206?
A temporary workaround for REDHAT-BUG-2335206 is to avoid sending Join requests within 2 seconds of a Cancel call in the LRA.
- agent/severity
- agent/first-publish-date
- agent/event
- agent/type
- agent/description
- agent/source
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-8447
- agent/references
- agent/last-modified-date
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat narayana