CVE-2024-8447Medium· 5.9▾ SunlitA security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the applicatio…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
0.6% → 0.7%
A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53122Medium· 5.5kernel: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit (CVE-2026-53122)
CVE-2026-98818Medium· 4.7kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() (CVE-2026-98818)
CVE-2026-98832Medium· 4.7kernel: blk-cgroup: save IRQ state in blkg_tryget_closest() (CVE-2026-98832)
CVE-2026-98865Medium· 4.4kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock held (CVE-2026-98865)
CVE-2026-98478Medium· 4.7kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling (CVE-2026-98478)
CVE-2026-74354High· 7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's mmap_lock to be held. Taking mmap_read_lock under arena->lock would AB-BA against arena_vm…