zebrad has mempool transaction admission denial via single-peer inbound queue saturation

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node accepts inbound P2P connections network.listenaddr is set, which is the default. 3. Your node's mempool is active node is synced near the chain tip. All default configurations are affected. Summary A...

PT-2026-55468

Name of the Vulnerable Software and Affected Versions ZEBRA versions prior to 4.5.0 Description An unauthenticated P2P peer can monopolize all 25 MAX INBOUND CONCURRENCY slots in the inbound mempool download and verification pipeline. This occurs because the bounded queue in...