A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a produce batch expires due to delivery.timeo…
高危 CVSS 8.7
摘要
A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a produce batch expires due to delivery.timeout.ms while a network request containing that batch is still in flight, the batch’s ByteBuffer is prematurely deallocated and returned to the buffer pool. If a subsequent producer batch—potentially destined for a different topic—reuses this freed buffer before the original network request completes,…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://issues.apache.org/jira/browse/KAFKA-19012 Issue Tracking
- https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/04/07/6 Mailing List
时间线
- nvd_ingest NVD