Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-25243 (GCVE-0-2026-25243)
Vulnerability from cvelistv5 – Published: 2026-05-05 16:44 – Updated: 2026-06-30 12:06
VLAI
EPSS
Title
redis-server RESTORE invalid memory access may allow remote code execution
Summary
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
19 references
Impacted products
15 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-25243",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-06T03:56:11.272472Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-06T13:24:39.678Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-05T16:44:57.306Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T12:06:15.807Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"name": "RHBZ#2466828",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26540"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25216"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26008"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27787"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29817"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33427"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27716"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28139"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26233"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26306"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23229"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25219"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25925"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:26540: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:25216: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:26008: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:27787: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:29817: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:33427: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:27716: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:28139: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:28142: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:26233: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26306: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:23229: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25219: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25925: Red Hat Enterprise Linux AppStream (v. 9)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-05T18:01:12.034Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-05T16:44:57.306Z",
"value": "Made public."
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "redis",
"vendor": "redis",
"versions": [
{
"status": "affected",
"version": "\u003c 8.6.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-05T16:44:57.306Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
},
{
"name": "https://github.com/redis/redis/releases/tag/8.6.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
}
],
"source": {
"advisory": "GHSA-c8h9-259x-jff4",
"discovery": "UNKNOWN"
},
"title": "redis-server RESTORE invalid memory access may allow remote code execution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-25243",
"datePublished": "2026-05-05T16:44:57.306Z",
"dateReserved": "2026-01-30T14:44:47.330Z",
"dateUpdated": "2026-06-30T12:06:15.807Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-25243",
"date": "2026-06-29",
"epss": "0.01368",
"percentile": "0.68438"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-25243\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-05-05T17:17:03.667\",\"lastModified\":\"2026-06-30T03:17:41.570\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"redis\",\"product\":\"redis\",\"versions\":[{\"version\":\"\u003c 8.6.3\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-06T03:56:11.272472Z\",\"id\":\"CVE-2026-25243\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.6.3\",\"matchCriteriaId\":\"D27823C5-96F2-4D85-89CF-9C5DEAC584E3\"}]}]}],\"references\":[{\"url\":\"https://github.com/redis/redis/releases/tag/8.6.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23229\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25216\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25219\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25925\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26008\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26233\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26306\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26540\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27716\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27787\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28139\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29817\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-25243\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2466828\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"redis: RESTORE invalid memory access may allow remote code execution\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-05T18:01:12.034Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-05T16:44:57.306Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:26540: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25216: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26008: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27787: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29817: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27716: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28139: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28142: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26233: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26306: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23229: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25219: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25925: Red Hat Enterprise Linux AppStream (v. 9)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-05T16:44:57.306Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-25243\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2466828\", \"name\": \"RHBZ#2466828\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26540\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25216\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27787\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29817\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27716\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28139\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26233\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26306\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23229\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25219\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25925\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"Heap-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T02:42:27.580Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25243\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-06T03:56:11.272472Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-05T18:44:16.453Z\"}}], \"cna\": {\"title\": \"redis-server RESTORE invalid memory access may allow remote code execution\", \"source\": {\"advisory\": \"GHSA-c8h9-259x-jff4\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 7.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"redis\", \"product\": \"redis\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 8.6.3\"}]}], \"references\": [{\"url\": \"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4\", \"name\": \"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/redis/redis/releases/tag/8.6.3\", \"name\": \"https://github.com/redis/redis/releases/tag/8.6.3\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-05-05T16:44:57.306Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-25243\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-30T02:42:27.580Z\", \"dateReserved\": \"2026-01-30T14:44:47.330Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-05-05T16:44:57.306Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
OPENSUSE-SU-2026:10711-1
Vulnerability from csaf_opensuse - Published: 2026-05-06 00:00 - Updated: 2026-05-06 00:00Summary
redis-8.6.3-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: redis-8.6.3-1.1 on GA media
Description of the patch: These are all security issues fixed in the redis-8.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10711
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "redis-8.6.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the redis-8.6.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10711",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10711-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23479 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23631 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25588 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25589 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25589/"
}
],
"title": "redis-8.6.3-1.1 on GA media",
"tracking": {
"current_release_date": "2026-05-06T00:00:00Z",
"generator": {
"date": "2026-05-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10711-1",
"initial_release_date": "2026-05-06T00:00:00Z",
"revision_history": [
{
"date": "2026-05-06T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "redis-8.6.3-1.1.aarch64",
"product": {
"name": "redis-8.6.3-1.1.aarch64",
"product_id": "redis-8.6.3-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-8.6.3-1.1.ppc64le",
"product": {
"name": "redis-8.6.3-1.1.ppc64le",
"product_id": "redis-8.6.3-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-8.6.3-1.1.s390x",
"product": {
"name": "redis-8.6.3-1.1.s390x",
"product_id": "redis-8.6.3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-8.6.3-1.1.x86_64",
"product": {
"name": "redis-8.6.3-1.1.x86_64",
"product_id": "redis-8.6.3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-8.6.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64"
},
"product_reference": "redis-8.6.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-8.6.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le"
},
"product_reference": "redis-8.6.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-8.6.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:redis-8.6.3-1.1.s390x"
},
"product_reference": "redis-8.6.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-8.6.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
},
"product_reference": "redis-8.6.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23479"
}
],
"notes": [
{
"category": "general",
"text": "Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23479",
"url": "https://www.suse.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "SUSE Bug 1264164 for CVE-2026-23479",
"url": "https://bugzilla.suse.com/1264164"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23479"
},
{
"cve": "CVE-2026-23631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23631"
}
],
"notes": [
{
"category": "general",
"text": "Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23631",
"url": "https://www.suse.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "SUSE Bug 1264165 for CVE-2026-23631",
"url": "https://bugzilla.suse.com/1264165"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23631"
},
{
"cve": "CVE-2026-25243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25243"
}
],
"notes": [
{
"category": "general",
"text": "Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25243",
"url": "https://www.suse.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "SUSE Bug 1264166 for CVE-2026-25243",
"url": "https://bugzilla.suse.com/1264166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-25243"
},
{
"cve": "CVE-2026-25588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25588"
}
],
"notes": [
{
"category": "general",
"text": "RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25588",
"url": "https://www.suse.com/security/cve/CVE-2026-25588"
},
{
"category": "external",
"summary": "SUSE Bug 1264167 for CVE-2026-25588",
"url": "https://bugzilla.suse.com/1264167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-25588"
},
{
"cve": "CVE-2026-25589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25589"
}
],
"notes": [
{
"category": "general",
"text": "RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisBloom module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This issue is fixed in version 2.8.20.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25589",
"url": "https://www.suse.com/security/cve/CVE-2026-25589"
},
{
"category": "external",
"summary": "SUSE Bug 1264168 for CVE-2026-25589",
"url": "https://bugzilla.suse.com/1264168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:redis-8.6.3-1.1.aarch64",
"openSUSE Tumbleweed:redis-8.6.3-1.1.ppc64le",
"openSUSE Tumbleweed:redis-8.6.3-1.1.s390x",
"openSUSE Tumbleweed:redis-8.6.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-25589"
}
]
}
RHSA-2026:23229
Vulnerability from csaf_redhat - Published: 2026-06-04 13:19 - Updated: 2026-06-30 08:21Summary
Red Hat Security Advisory: redis security update
Severity
Important
Notes
Topic: An update for redis is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for redis is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:23229",
"url": "https://access.redhat.com/errata/RHSA-2026:23229"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23229.json"
}
],
"title": "Red Hat Security Advisory: redis security update",
"tracking": {
"current_release_date": "2026-06-30T08:21:16+00:00",
"generator": {
"date": "2026-06-30T08:21:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:23229",
"initial_release_date": "2026-06-04T13:19:19+00:00",
"revision_history": [
{
"date": "2026-06-04T13:19:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-04T13:19:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T08:21:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_8.src",
"product": {
"name": "redis-0:6.2.22-1.el9_8.src",
"product_id": "redis-0:6.2.22-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_8.aarch64",
"product": {
"name": "redis-0:6.2.22-1.el9_8.aarch64",
"product_id": "redis-0:6.2.22-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_8.aarch64",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_8.aarch64",
"product_id": "redis-devel-0:6.2.22-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"product_id": "redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_8.ppc64le",
"product": {
"name": "redis-0:6.2.22-1.el9_8.ppc64le",
"product_id": "redis-0:6.2.22-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_8.ppc64le",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_8.ppc64le",
"product_id": "redis-devel-0:6.2.22-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"product_id": "redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_8.s390x",
"product": {
"name": "redis-0:6.2.22-1.el9_8.s390x",
"product_id": "redis-0:6.2.22-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_8.s390x",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_8.s390x",
"product_id": "redis-devel-0:6.2.22-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_8.s390x",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.s390x",
"product_id": "redis-debugsource-0:6.2.22-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_8.x86_64",
"product": {
"name": "redis-0:6.2.22-1.el9_8.x86_64",
"product_id": "redis-0:6.2.22-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_8.x86_64",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_8.x86_64",
"product_id": "redis-devel-0:6.2.22-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"product_id": "redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_8.i686",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_8.i686",
"product_id": "redis-devel-0:6.2.22-1.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_8.i686",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.i686",
"product_id": "redis-debugsource-0:6.2.22-1.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_8.i686",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.i686",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:6.2.22-1.el9_8.noarch",
"product": {
"name": "redis-doc-0:6.2.22-1.el9_8.noarch",
"product_id": "redis-doc-0:6.2.22-1.el9_8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@6.2.22-1.el9_8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64"
},
"product_reference": "redis-0:6.2.22-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le"
},
"product_reference": "redis-0:6.2.22-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x"
},
"product_reference": "redis-0:6.2.22-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src"
},
"product_reference": "redis-0:6.2.22-1.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64"
},
"product_reference": "redis-0:6.2.22-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:6.2.22-1.el9_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch"
},
"product_reference": "redis-doc-0:6.2.22-1.el9_8.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-04T13:19:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:23229"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.el9_8.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:25216
Vulnerability from csaf_redhat - Published: 2026-06-11 10:05 - Updated: 2026-06-30 09:46Summary
Red Hat Security Advisory: valkey security update
Severity
Important
Notes
Topic: An update for valkey is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.
Security Fix(es):
* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)
* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for valkey is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.\n\nSecurity Fix(es):\n\n* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)\n\n* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:25216",
"url": "https://access.redhat.com/errata/RHSA-2026:25216"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25216.json"
}
],
"title": "Red Hat Security Advisory: valkey security update",
"tracking": {
"current_release_date": "2026-06-30T09:46:29+00:00",
"generator": {
"date": "2026-06-30T09:46:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:25216",
"initial_release_date": "2026-06-11T10:05:40+00:00",
"revision_history": [
{
"date": "2026-06-11T10:05:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-11T10:05:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T09:46:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_2.src",
"product": {
"name": "valkey-0:8.0.9-1.el10_2.src",
"product_id": "valkey-0:8.0.9-1.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_2.aarch64",
"product": {
"name": "valkey-0:8.0.9-1.el10_2.aarch64",
"product_id": "valkey-0:8.0.9-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_2.aarch64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_2.aarch64",
"product_id": "valkey-devel-0:8.0.9-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_2.ppc64le",
"product": {
"name": "valkey-0:8.0.9-1.el10_2.ppc64le",
"product_id": "valkey-0:8.0.9-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"product_id": "valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_2.s390x",
"product": {
"name": "valkey-0:8.0.9-1.el10_2.s390x",
"product_id": "valkey-0:8.0.9-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_2.s390x",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_2.s390x",
"product_id": "valkey-devel-0:8.0.9-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_2.x86_64",
"product": {
"name": "valkey-0:8.0.9-1.el10_2.x86_64",
"product_id": "valkey-0:8.0.9-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_2.x86_64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_2.x86_64",
"product_id": "valkey-devel-0:8.0.9-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64"
},
"product_reference": "valkey-0:8.0.9-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le"
},
"product_reference": "valkey-0:8.0.9-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x"
},
"product_reference": "valkey-0:8.0.9-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src"
},
"product_reference": "valkey-0:8.0.9-1.el10_2.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64"
},
"product_reference": "valkey-0:8.0.9-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:01:54.051832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: use-after-free in unblock client flow may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, a highly specific sequence of events and time dependent conditions that are not directly in control of an attacker must occur, increasing the complexity of exploitation. Additionally, the attacker needs to be authenticated, limiting the exposure of this issue. To reflect these conditions, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "RHBZ#2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3",
"url": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3"
}
],
"release_date": "2026-05-05T16:36:05.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T10:05:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25216"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: use-after-free in unblock client flow may allow remote code execution"
},
{
"cve": "CVE-2026-23631",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:02:23.286903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466788"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Remote code execution via use-after-free in Lua scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Redis affects instances configured with Lua scripting and operating as replicas where the `replica-read-only` setting is disabled or can be modified by an authenticated attacker. Exploitation of a use-after-free flaw during master-replica synchronization could lead to remote code execution. The risk is present in deployments where Redis replicas are configured for write operations or lack sufficient access controls to prevent modification of the `replica-read-only` setting.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "RHBZ#2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826",
"url": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"
}
],
"release_date": "2026-05-05T16:39:32.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T10:05:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25216"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Remote code execution via use-after-free in Lua scripting"
},
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T10:05:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25216"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.src",
"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.x86_64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.aarch64",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.ppc64le",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x",
"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:25219
Vulnerability from csaf_redhat - Published: 2026-06-11 11:44 - Updated: 2026-06-30 09:46Summary
Red Hat Security Advisory: redis:7 security update
Severity
Important
Notes
Topic: An update for the redis:7 module is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)
* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redis:7 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)\n\n* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:25219",
"url": "https://access.redhat.com/errata/RHSA-2026:25219"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25219.json"
}
],
"title": "Red Hat Security Advisory: redis:7 security update",
"tracking": {
"current_release_date": "2026-06-30T09:46:30+00:00",
"generator": {
"date": "2026-06-30T09:46:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:25219",
"initial_release_date": "2026-06-11T11:44:56+00:00",
"revision_history": [
{
"date": "2026-06-11T11:44:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-11T11:44:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T09:46:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=src\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7",
"product": {
"name": "redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch (redis:7)",
"product_id": "redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=noarch\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=aarch64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=aarch64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=aarch64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=aarch64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64\u0026rpmmod=redis:7:9080020260521083756:9"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
},
"product_reference": "redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:01:54.051832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: use-after-free in unblock client flow may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, a highly specific sequence of events and time dependent conditions that are not directly in control of an attacker must occur, increasing the complexity of exploitation. Additionally, the attacker needs to be authenticated, limiting the exposure of this issue. To reflect these conditions, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "RHBZ#2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3",
"url": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3"
}
],
"release_date": "2026-05-05T16:36:05.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T11:44:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25219"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: use-after-free in unblock client flow may allow remote code execution"
},
{
"cve": "CVE-2026-23631",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:02:23.286903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466788"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Remote code execution via use-after-free in Lua scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Redis affects instances configured with Lua scripting and operating as replicas where the `replica-read-only` setting is disabled or can be modified by an authenticated attacker. Exploitation of a use-after-free flaw during master-replica synchronization could lead to remote code execution. The risk is present in deployments where Redis replicas are configured for write operations or lack sufficient access controls to prevent modification of the `replica-read-only` setting.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "RHBZ#2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826",
"url": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"
}
],
"release_date": "2026-05-05T16:39:32.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T11:44:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25219"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Remote code execution via use-after-free in Lua scripting"
},
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-11T11:44:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25219"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.src::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.aarch64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7",
"AppStream-9.8.0.Z.MAIN.EUS:redis-doc-0:7.2.14-1.module+el9.8.0+24327+41ceb644.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:25925
Vulnerability from csaf_redhat - Published: 2026-06-15 10:18 - Updated: 2026-06-30 09:46Summary
Red Hat Security Advisory: valkey security update
Severity
Important
Notes
Topic: An update for valkey is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.
Security Fix(es):
* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)
* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for valkey is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.\n\nSecurity Fix(es):\n\n* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)\n\n* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:25925",
"url": "https://access.redhat.com/errata/RHSA-2026:25925"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25925.json"
}
],
"title": "Red Hat Security Advisory: valkey security update",
"tracking": {
"current_release_date": "2026-06-30T09:46:30+00:00",
"generator": {
"date": "2026-06-30T09:46:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:25925",
"initial_release_date": "2026-06-15T10:18:21+00:00",
"revision_history": [
{
"date": "2026-06-15T10:18:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-15T10:18:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T09:46:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el9_8.src",
"product": {
"name": "valkey-0:8.0.9-1.el9_8.src",
"product_id": "valkey-0:8.0.9-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el9_8.aarch64",
"product": {
"name": "valkey-0:8.0.9-1.el9_8.aarch64",
"product_id": "valkey-0:8.0.9-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el9_8.aarch64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el9_8.aarch64",
"product_id": "valkey-devel-0:8.0.9-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"product_id": "valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el9_8.ppc64le",
"product": {
"name": "valkey-0:8.0.9-1.el9_8.ppc64le",
"product_id": "valkey-0:8.0.9-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"product": {
"name": "valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"product_id": "valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"product_id": "valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"product_id": "valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el9_8.s390x",
"product": {
"name": "valkey-0:8.0.9-1.el9_8.s390x",
"product_id": "valkey-0:8.0.9-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el9_8.s390x",
"product": {
"name": "valkey-devel-0:8.0.9-1.el9_8.s390x",
"product_id": "valkey-devel-0:8.0.9-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"product_id": "valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"product_id": "valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el9_8.x86_64",
"product": {
"name": "valkey-0:8.0.9-1.el9_8.x86_64",
"product_id": "valkey-0:8.0.9-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el9_8.x86_64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el9_8.x86_64",
"product_id": "valkey-devel-0:8.0.9-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"product_id": "valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64"
},
"product_reference": "valkey-0:8.0.9-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le"
},
"product_reference": "valkey-0:8.0.9-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x"
},
"product_reference": "valkey-0:8.0.9-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src"
},
"product_reference": "valkey-0:8.0.9-1.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64"
},
"product_reference": "valkey-0:8.0.9-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le"
},
"product_reference": "valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x"
},
"product_reference": "valkey-devel-0:8.0.9-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:01:54.051832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: use-after-free in unblock client flow may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, a highly specific sequence of events and time dependent conditions that are not directly in control of an attacker must occur, increasing the complexity of exploitation. Additionally, the attacker needs to be authenticated, limiting the exposure of this issue. To reflect these conditions, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "RHBZ#2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3",
"url": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3"
}
],
"release_date": "2026-05-05T16:36:05.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-15T10:18:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25925"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: use-after-free in unblock client flow may allow remote code execution"
},
{
"cve": "CVE-2026-23631",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:02:23.286903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466788"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Remote code execution via use-after-free in Lua scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Redis affects instances configured with Lua scripting and operating as replicas where the `replica-read-only` setting is disabled or can be modified by an authenticated attacker. Exploitation of a use-after-free flaw during master-replica synchronization could lead to remote code execution. The risk is present in deployments where Redis replicas are configured for write operations or lack sufficient access controls to prevent modification of the `replica-read-only` setting.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "RHBZ#2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826",
"url": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"
}
],
"release_date": "2026-05-05T16:39:32.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-15T10:18:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25925"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Remote code execution via use-after-free in Lua scripting"
},
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-15T10:18:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25925"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:26008
Vulnerability from csaf_redhat - Published: 2026-06-15 15:32 - Updated: 2026-06-30 08:21Summary
Red Hat Security Advisory: redis:6 security update
Severity
Important
Notes
Topic: An update for the redis:6 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redis:6 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26008",
"url": "https://access.redhat.com/errata/RHSA-2026:26008"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26008.json"
}
],
"title": "Red Hat Security Advisory: redis:6 security update",
"tracking": {
"current_release_date": "2026-06-30T08:21:18+00:00",
"generator": {
"date": "2026-06-30T08:21:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:26008",
"initial_release_date": "2026-06-15T15:32:47+00:00",
"revision_history": [
{
"date": "2026-06-15T15:32:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-15T15:32:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T08:21:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"product": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src (redis:6)",
"product_id": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=src\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6",
"product": {
"name": "redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch (redis:6)",
"product_id": "redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=noarch\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6)",
"product_id": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=aarch64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6)",
"product_id": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=aarch64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6)",
"product_id": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=aarch64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6)",
"product_id": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=aarch64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6)",
"product_id": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=ppc64le\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6)",
"product_id": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=ppc64le\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6)",
"product_id": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=ppc64le\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6)",
"product_id": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=ppc64le\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6)",
"product_id": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=s390x\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6)",
"product_id": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=s390x\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6)",
"product_id": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=s390x\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6)",
"product_id": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=s390x\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6)",
"product_id": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6)",
"product_id": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6)",
"product_id": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6)",
"product_id": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64\u0026rpmmod=redis:6:8100020260522105353:489197e6"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6"
},
"product_reference": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6"
},
"product_reference": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6"
},
"product_reference": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6"
},
"product_reference": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6"
},
"product_reference": "redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6"
},
"product_reference": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6"
},
"product_reference": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6"
},
"product_reference": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6"
},
"product_reference": "redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6"
},
"product_reference": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6"
},
"product_reference": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6"
},
"product_reference": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6"
},
"product_reference": "redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6"
},
"product_reference": "redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-15T15:32:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26008"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.src::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-debugsource-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.aarch64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.ppc64le::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.s390x::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6",
"AppStream-8.10.0.Z.MAIN.EUS:redis-doc-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.noarch::redis:6"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:26233
Vulnerability from csaf_redhat - Published: 2026-06-16 12:14 - Updated: 2026-06-30 08:21Summary
Red Hat Security Advisory: redis security update
Severity
Important
Notes
Topic: An update for redis is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for redis is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26233",
"url": "https://access.redhat.com/errata/RHSA-2026:26233"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26233.json"
}
],
"title": "Red Hat Security Advisory: redis security update",
"tracking": {
"current_release_date": "2026-06-30T08:21:19+00:00",
"generator": {
"date": "2026-06-30T08:21:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:26233",
"initial_release_date": "2026-06-16T12:14:59+00:00",
"revision_history": [
{
"date": "2026-06-16T12:14:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-16T12:14:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T08:21:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_6.src",
"product": {
"name": "redis-0:6.2.22-1.el9_6.src",
"product_id": "redis-0:6.2.22-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_6.aarch64",
"product": {
"name": "redis-0:6.2.22-1.el9_6.aarch64",
"product_id": "redis-0:6.2.22-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_6.aarch64",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_6.aarch64",
"product_id": "redis-devel-0:6.2.22-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"product_id": "redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_6.ppc64le",
"product": {
"name": "redis-0:6.2.22-1.el9_6.ppc64le",
"product_id": "redis-0:6.2.22-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_6.ppc64le",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_6.ppc64le",
"product_id": "redis-devel-0:6.2.22-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"product_id": "redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_6.s390x",
"product": {
"name": "redis-0:6.2.22-1.el9_6.s390x",
"product_id": "redis-0:6.2.22-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_6.s390x",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_6.s390x",
"product_id": "redis-devel-0:6.2.22-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_6.s390x",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.s390x",
"product_id": "redis-debugsource-0:6.2.22-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.22-1.el9_6.x86_64",
"product": {
"name": "redis-0:6.2.22-1.el9_6.x86_64",
"product_id": "redis-0:6.2.22-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.22-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_6.x86_64",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_6.x86_64",
"product_id": "redis-devel-0:6.2.22-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"product_id": "redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-devel-0:6.2.22-1.el9_6.i686",
"product": {
"name": "redis-devel-0:6.2.22-1.el9_6.i686",
"product_id": "redis-devel-0:6.2.22-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.22-1.el9_6.i686",
"product": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.i686",
"product_id": "redis-debugsource-0:6.2.22-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.22-1.el9_6.i686",
"product": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.i686",
"product_id": "redis-debuginfo-0:6.2.22-1.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.22-1.el9_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:6.2.22-1.el9_6.noarch",
"product": {
"name": "redis-doc-0:6.2.22-1.el9_6.noarch",
"product_id": "redis-doc-0:6.2.22-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@6.2.22-1.el9_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64"
},
"product_reference": "redis-0:6.2.22-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le"
},
"product_reference": "redis-0:6.2.22-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x"
},
"product_reference": "redis-0:6.2.22-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src"
},
"product_reference": "redis-0:6.2.22-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64"
},
"product_reference": "redis-0:6.2.22-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64"
},
"product_reference": "redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64"
},
"product_reference": "redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64"
},
"product_reference": "redis-devel-0:6.2.22-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:6.2.22-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch"
},
"product_reference": "redis-doc-0:6.2.22-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T12:14:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26233"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:redis-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.i686",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:redis-doc-0:6.2.22-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:26306
Vulnerability from csaf_redhat - Published: 2026-06-16 13:39 - Updated: 2026-06-30 09:46Summary
Red Hat Security Advisory: redis:7 security update
Severity
Important
Notes
Topic: An update for the redis:7 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)
* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redis:7 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)\n\n* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26306",
"url": "https://access.redhat.com/errata/RHSA-2026:26306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26306.json"
}
],
"title": "Red Hat Security Advisory: redis:7 security update",
"tracking": {
"current_release_date": "2026-06-30T09:46:30+00:00",
"generator": {
"date": "2026-06-30T09:46:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:26306",
"initial_release_date": "2026-06-16T13:39:50+00:00",
"revision_history": [
{
"date": "2026-06-16T13:39:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-16T13:39:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T09:46:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=src\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7",
"product": {
"name": "redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch (redis:7)",
"product_id": "redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=noarch\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=s390x\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=s390x\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=s390x\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=s390x\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7)",
"product_id": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7)",
"product_id": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7)",
"product_id": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7)",
"product_id": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64\u0026rpmmod=redis:7:9060020260602115714:9"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7"
},
"product_reference": "redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7"
},
"product_reference": "redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7"
},
"product_reference": "redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7"
},
"product_reference": "redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
},
"product_reference": "redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:01:54.051832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: use-after-free in unblock client flow may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, a highly specific sequence of events and time dependent conditions that are not directly in control of an attacker must occur, increasing the complexity of exploitation. Additionally, the attacker needs to be authenticated, limiting the exposure of this issue. To reflect these conditions, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "RHBZ#2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3",
"url": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3"
}
],
"release_date": "2026-05-05T16:36:05.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T13:39:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26306"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: use-after-free in unblock client flow may allow remote code execution"
},
{
"cve": "CVE-2026-23631",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:02:23.286903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466788"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Remote code execution via use-after-free in Lua scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Redis affects instances configured with Lua scripting and operating as replicas where the `replica-read-only` setting is disabled or can be modified by an authenticated attacker. Exploitation of a use-after-free flaw during master-replica synchronization could lead to remote code execution. The risk is present in deployments where Redis replicas are configured for write operations or lack sufficient access controls to prevent modification of the `replica-read-only` setting.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "RHBZ#2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826",
"url": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"
}
],
"release_date": "2026-05-05T16:39:32.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T13:39:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26306"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Remote code execution via use-after-free in Lua scripting"
},
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T13:39:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26306"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.src::redis:7",
"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.s390x::redis:7",
"AppStream-9.6.0.Z.EUS:redis-devel-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7",
"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:26540
Vulnerability from csaf_redhat - Published: 2026-06-17 10:41 - Updated: 2026-06-30 09:46Summary
Red Hat Security Advisory: valkey security update
Severity
Important
Notes
Topic: An update for valkey is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.
Security Fix(es):
* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)
* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for valkey is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.\n\nSecurity Fix(es):\n\n* redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479)\n\n* redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631)\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26540",
"url": "https://access.redhat.com/errata/RHSA-2026:26540"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26540.json"
}
],
"title": "Red Hat Security Advisory: valkey security update",
"tracking": {
"current_release_date": "2026-06-30T09:46:30+00:00",
"generator": {
"date": "2026-06-30T09:46:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:26540",
"initial_release_date": "2026-06-17T10:41:53+00:00",
"revision_history": [
{
"date": "2026-06-17T10:41:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-17T10:41:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T09:46:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_0.src",
"product": {
"name": "valkey-0:8.0.9-1.el10_0.src",
"product_id": "valkey-0:8.0.9-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_0.aarch64",
"product": {
"name": "valkey-0:8.0.9-1.el10_0.aarch64",
"product_id": "valkey-0:8.0.9-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_0.aarch64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_0.aarch64",
"product_id": "valkey-devel-0:8.0.9-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_0.ppc64le",
"product": {
"name": "valkey-0:8.0.9-1.el10_0.ppc64le",
"product_id": "valkey-0:8.0.9-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"product_id": "valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_0.s390x",
"product": {
"name": "valkey-0:8.0.9-1.el10_0.s390x",
"product_id": "valkey-0:8.0.9-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_0.s390x",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_0.s390x",
"product_id": "valkey-devel-0:8.0.9-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "valkey-0:8.0.9-1.el10_0.x86_64",
"product": {
"name": "valkey-0:8.0.9-1.el10_0.x86_64",
"product_id": "valkey-0:8.0.9-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-devel-0:8.0.9-1.el10_0.x86_64",
"product": {
"name": "valkey-devel-0:8.0.9-1.el10_0.x86_64",
"product_id": "valkey-devel-0:8.0.9-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"product": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"product_id": "valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"product": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"product_id": "valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64"
},
"product_reference": "valkey-0:8.0.9-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le"
},
"product_reference": "valkey-0:8.0.9-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x"
},
"product_reference": "valkey-0:8.0.9-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src"
},
"product_reference": "valkey-0:8.0.9-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64"
},
"product_reference": "valkey-0:8.0.9-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64"
},
"product_reference": "valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-debugsource-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64"
},
"product_reference": "valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "valkey-devel-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
},
"product_reference": "valkey-devel-0:8.0.9-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23479",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:01:54.051832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. The unblock client flow does not handle an error return from the `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: use-after-free in unblock client flow may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, a highly specific sequence of events and time dependent conditions that are not directly in control of an attacker must occur, increasing the complexity of exploitation. Additionally, the attacker needs to be authenticated, limiting the exposure of this issue. To reflect these conditions, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23479"
},
{
"category": "external",
"summary": "RHBZ#2466780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23479"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3",
"url": "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3"
}
],
"release_date": "2026-05-05T16:36:05.486000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-17T10:41:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26540"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: use-after-free in unblock client flow may allow remote code execution"
},
{
"cve": "CVE-2026-23631",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-05-05T17:02:23.286903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466788"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis, an in-memory data structure store. An authenticated attacker can exploit a use-after-free vulnerability in redis-server with Lua scripting. This occurs through the master-replica synchronization mechanism on replicas where replica-read-only is disabled or can be disabled. Successful exploitation may lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Remote code execution via use-after-free in Lua scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Redis affects instances configured with Lua scripting and operating as replicas where the `replica-read-only` setting is disabled or can be modified by an authenticated attacker. Exploitation of a use-after-free flaw during master-replica synchronization could lead to remote code execution. The risk is present in deployments where Redis replicas are configured for write operations or lack sufficient access controls to prevent modification of the `replica-read-only` setting.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23631"
},
{
"category": "external",
"summary": "RHBZ#2466788",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466788"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23631"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826",
"url": "https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"
}
],
"release_date": "2026-05-05T16:39:32.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-17T10:41:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26540"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Remote code execution via use-after-free in Lua scripting"
},
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-17T10:41:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26540"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.src",
"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
RHSA-2026:27716
Vulnerability from csaf_redhat - Published: 2026-06-22 02:32 - Updated: 2026-06-30 08:21Summary
Red Hat Security Advisory: redis security update
Severity
Important
Notes
Topic: An update for redis is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for redis is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27716",
"url": "https://access.redhat.com/errata/RHSA-2026:27716"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27716.json"
}
],
"title": "Red Hat Security Advisory: redis security update",
"tracking": {
"current_release_date": "2026-06-30T08:21:21+00:00",
"generator": {
"date": "2026-06-30T08:21:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:27716",
"initial_release_date": "2026-06-22T02:32:36+00:00",
"revision_history": [
{
"date": "2026-06-22T02:32:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T02:32:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T08:21:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.7-1.el9_2.6.src",
"product": {
"name": "redis-0:6.2.7-1.el9_2.6.src",
"product_id": "redis-0:6.2.7-1.el9_2.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.7-1.el9_2.6.aarch64",
"product": {
"name": "redis-0:6.2.7-1.el9_2.6.aarch64",
"product_id": "redis-0:6.2.7-1.el9_2.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"product": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"product_id": "redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"product": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"product_id": "redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_2.6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"product": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"product_id": "redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.7-1.el9_2.6.ppc64le",
"product": {
"name": "redis-0:6.2.7-1.el9_2.6.ppc64le",
"product_id": "redis-0:6.2.7-1.el9_2.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"product": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"product_id": "redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"product": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"product_id": "redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_2.6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"product": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"product_id": "redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.7-1.el9_2.6.s390x",
"product": {
"name": "redis-0:6.2.7-1.el9_2.6.s390x",
"product_id": "redis-0:6.2.7-1.el9_2.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.7-1.el9_2.6.s390x",
"product": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.s390x",
"product_id": "redis-devel-0:6.2.7-1.el9_2.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"product": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"product_id": "redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_2.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"product": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"product_id": "redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-0:6.2.7-1.el9_2.6.x86_64",
"product": {
"name": "redis-0:6.2.7-1.el9_2.6.x86_64",
"product_id": "redis-0:6.2.7-1.el9_2.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"product": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"product_id": "redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"product": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"product_id": "redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_2.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"product": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"product_id": "redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-devel-0:6.2.7-1.el9_2.6.i686",
"product": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.i686",
"product_id": "redis-devel-0:6.2.7-1.el9_2.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"product": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"product_id": "redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_2.6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"product": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"product_id": "redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "redis-doc-0:6.2.7-1.el9_2.6.noarch",
"product": {
"name": "redis-doc-0:6.2.7-1.el9_2.6.noarch",
"product_id": "redis-doc-0:6.2.7-1.el9_2.6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redis-doc@6.2.7-1.el9_2.6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64"
},
"product_reference": "redis-0:6.2.7-1.el9_2.6.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.7-1.el9_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le"
},
"product_reference": "redis-0:6.2.7-1.el9_2.6.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x"
},
"product_reference": "redis-0:6.2.7-1.el9_2.6.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.7-1.el9_2.6.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src"
},
"product_reference": "redis-0:6.2.7-1.el9_2.6.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-0:6.2.7-1.el9_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64"
},
"product_reference": "redis-0:6.2.7-1.el9_2.6.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64"
},
"product_reference": "redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686"
},
"product_reference": "redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le"
},
"product_reference": "redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x"
},
"product_reference": "redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64"
},
"product_reference": "redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64"
},
"product_reference": "redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686"
},
"product_reference": "redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le"
},
"product_reference": "redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x"
},
"product_reference": "redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-debugsource-0:6.2.7-1.el9_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64"
},
"product_reference": "redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64"
},
"product_reference": "redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686"
},
"product_reference": "redis-devel-0:6.2.7-1.el9_2.6.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le"
},
"product_reference": "redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x"
},
"product_reference": "redis-devel-0:6.2.7-1.el9_2.6.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-devel-0:6.2.7-1.el9_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64"
},
"product_reference": "redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redis-doc-0:6.2.7-1.el9_2.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch"
},
"product_reference": "redis-doc-0:6.2.7-1.el9_2.6.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25243",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-05-05T18:01:12.034461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: RESTORE invalid memory access may allow remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an authenticated attacker with permission to execute the RESTORE command needs to send a specially crafted serialized payload to be processed by Redis, limiting its exposure to authenticated users. This allows the attacker to cause an invalid memory access, resulting in a denial of service or potentially in arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25243"
},
{
"category": "external",
"summary": "RHBZ#2466828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25243"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.6.3",
"url": "https://github.com/redis/redis/releases/tag/8.6.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4",
"url": "https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"
}
],
"release_date": "2026-05-05T16:44:57.306000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T02:32:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27716"
},
{
"category": "workaround",
"details": "To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.src",
"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.aarch64",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.ppc64le",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.s390x",
"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.x86_64",
"AppStream-9.2.0.Z.E4S:redis-doc-0:6.2.7-1.el9_2.6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: RESTORE invalid memory access may allow remote code execution"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…