Red Hat Security Advisory: valkey security update

Fixed packages 4

Vulnerabilities 4

• Critical 10.0
  CVE-2025-49844 Public exploit Scanner template EPSS 83%

  Redis Lua Use-After-Free may lead to remote code execution

  Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 3, 2025
• High 7.0
  CVE-2025-46817 Public exploit Scanner template

  Lua library commands may lead to integer overflow and potential RCE

  Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all …

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 3, 2025
• Medium 6.3
  CVE-2025-46819 Public exploit Scanner template

  Redis is vulnerable to DoS via specially crafted LUA scripts

  Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 3, 2025
• Medium 6.0
  CVE-2025-46818 Public exploit Scanner template

  Redis: Authenticated users can execute LUA scripts as a different user

  Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user…

  Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  Oct 3, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401292
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401322
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401324
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19675.json
• report
  https://access.redhat.com/security/cve/CVE-2025-46817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46817
• article
  https://github.com/redis/redis/commit/fc9abc775e308374f667fdf3e723ef4b7eb0e3ca
• article
  https://github.com/redis/redis/releases/tag/8.2.2
• article
  https://github.com/redis/redis/security/advisories/GHSA-m8fj-85cg-7vhp
• report
  https://access.redhat.com/security/cve/CVE-2025-46818
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46818
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46818
• article
  https://github.com/redis/redis/commit/45eac0262028c771b6f5307372814b75f49f7a9e
• article
  https://github.com/redis/redis/security/advisories/GHSA-qrv7-wcrx-q5jp
• report
  https://access.redhat.com/security/cve/CVE-2025-46819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46819
• article
  https://github.com/redis/redis/commit/3a1624da2449ac3dbfc4bdaed43adf77a0b7bfba
• article
  https://github.com/redis/redis/security/advisories/GHSA-4c68-q8q8-3g4f
• report
  https://access.redhat.com/security/cve/CVE-2025-49844
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-49844
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-49844
• article
  https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539
• article
  https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q
• article
  https://redis.io/blog/security-advisory-cve-2025-49844/