Homepage

Missing Release of Resource after Effective Lifetime Affecting strimzi-kafka-operator-0.45-kafka-base package, versions *

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.04% (12th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-STRIMZIKAFKAOPERATOR045KAFKABASE-16536324
  • published8 May 2026
  • disclosed13 May 2026
Report a new vulnerability Found a mistake?

Introduced: 8 May 2026

NewCVE-2026-42577  (opens in a new tab)
CWE-772  (opens in a new tab)

How to fix?

There is no fixed version for Minimos:latest strimzi-kafka-operator-0.45-kafka-base.

NVD Description

Note: Versions mentioned in the description apply only to the upstream strimzi-kafka-operator-0.45-kafka-base package and not the strimzi-kafka-operator-0.45-kafka-base package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and close TCP connections that receive a RST after being half-closed, leading to stale channels that are never cleaned up and, in some code paths, a 100% CPU busy-loop in the event loop thread. This vulnerability is fixed in 4.2.13.Final.