Summary
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.
Security Fix(es):
* redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | redis | 6.2.22-1.module_el8.10.0+4197+3446deec |
| AlmaLinux · 8 | redis-devel | 6.2.22-1.module_el8.10.0+4197+3446deec |
| AlmaLinux · 8 | redis-doc | 6.2.22-1.module_el8.10.0+4197+3446deec |
Vulnerabilities 1
-
High 7.7CVE-2026-25243 Public exploit
redis-server RESTORE invalid memory access may allow remote code execution
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that tr…