Summary
It was discovered that Redis did not properly manage memory when handling
the TLS pending-data list. A remote attacker could possibly use this issue
to execute arbitrary code. (CVE-2026-81934)
It was discovered that Redis incorrectly handled certain inputs when
processing cluster bus packets. A remote attacker could possibly use this
issue to expose sensitive information or cause a denial of service. This
issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-92925)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | redis | 5:6.0.16-1ubuntu1.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | redis | 5:7.0.15-1ubuntu0.24.04.5 |
| Ubuntu · 26.04 LTS 26.04:LTS | redis | 5:8.0.5-1ubuntu0.1 |
Vulnerabilities 2
-
High 7.1
Redis TLS pending-data list use-after-free
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the pri…
-
High 7.1
Redis: redis: out-of-bounds read via crafted cluster bus packets
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious…