Nervos CKB Pool does not remove the conflicting transactions from the statistics

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node...

GHSA-H4C3-5275-VRMG Nervos CKB Pool does not remove the conflicting transactions from the statistics

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node...

PT-2024-40310 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: CKB node versions prior to 0.39.2 Description: A bug in the pool statistics causes conflicting transactions to not be subtracted when removed from the pool, leading to the transaction pool becoming full and rejecting all transactions...