https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:21:22.231242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8447 CVE-2024-8447 — Narayana: deadlock via multiple join requests sent to lra coordinator 2026-10-06T11:21:22.247681+00:00

Affected: narayana, Red Hat JBoss EAP XP 5.0 Update 2.0, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform Expansion Pack

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.