CVE-2026-22868: Go Ethereum Missing Buffer Pool Derivesha
Repeatedly invoking an allocation-heavy function like `types.DeriveSha` inside a loop over external network data without a shared buffer pool can lead to massive garbage collection overhead and Denial of Service (CVE-2026-22868).
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0go
greprules fetch cve-2026-22868-go-ethereum-missing-buffer-pool-derivesha --engine opengrepDescription
Repeatedly invoking an allocation-heavy function like `types.DeriveSha` inside a loop over external network data without a shared buffer pool can lead to massive garbage collection overhead and Denial of Service (CVE-2026-22868).
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.