Description
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| valkey-io | valkey | < 7.2.14, >= 8.0.0, < 8.0.10, >= 8.1.0, < 8.1.9, >= 9.0.0, < 9.0.5, >= 9.1.0, < 9.1.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | valkey | 9.1.1-1 | — |
| Debian 13 | valkey | 8.1.1+dfsg1-3+deb13u3 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | valkey | 9.0.4-0ubuntu0.2 | USN-8771-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | valkey | 7.2.13+dfsg1-0ubuntu0.1+esm1 | USN-8771-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | valkey +1 | 8.0.11-1.el10_2 | RHSA-2026:64796 |
| RHEL 9 | valkey +1 | 8.0.10-1.el9_8 | RHSA-2026:64807 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | valkey +1 | 8.0.11-1.el10_0 | RHSA-2026:68601 |
| Red Hat Hardened Images 1 | valkey +5 | 9.0.6-0.1.hum1 | RHSA-2026:61884 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | valkey +1 | 8.0.11-1.el10_2 | ALSA-2026:64796 |
| AlmaLinux 9 | valkey +1 | 8.0.10-1.el9_8 | ALSA-2026:64807 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | valkey | 8.0.11-1.el10_2 | RLSA-2026:64796 |
| Rocky Linux 9 | valkey | 8.0.10-1.el9_8 | RLSA-2026:64807 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | valkey | 8.0.10-150700.3.20.1 | SUSE-SU-2026:3427-1 |
| SLES 15 SP6 | valkey | 8.0.10-150600.13.28.1 | SUSE-SU-2026:3483-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | valkey | 8.0.10-150600.13.28.1 | SUSE-SU-2026:3483-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | valkey | 9.1.1-1.1 | openSUSE-SU-2026:11381-1 |
| openSUSE Leap 16.0 | valkey | 8.0.10-160000.1.1 | openSUSE-SU-2026:21485-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | valkey | 9.0.7-r0 | — |
| Alpine v3.23 | valkey | 9.0.7-r0 | — |
| Alpine v3.21 | valkey | 7.2.15-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | valkey +1 | 9.0.5-1.amzn2023.0.1 | ALAS2023-2026-2011 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | valkey | 8.0.10-1 | — |
Advisories 14
- RHSA-2026:61884 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2026:64807 Important: valkey security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:68601 Red Hat Security Advisory: valkey security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64807 Red Hat Security Advisory: valkey security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64796 Red Hat Security Advisory: valkey security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- USN-8771-1 valkey vulnerabilities Ubuntu Security Notices (USN) · Sep 17, 2026
- RLSA-2026:64796 Important: valkey security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64807 Important: valkey security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- SUSE-SU-2026:3483-1 Security update for valkey SUSE / openSUSE Security Updates · Aug 4, 2026
- ALAS2023-2026-2011 Important: valkey security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 4, 2026
- openSUSE-SU-2026:21485-1 Security update for valkey SUSE / openSUSE Security Updates · Jul 31, 2026
- SUSE-SU-2026:3427-1 Security update for valkey SUSE / openSUSE Security Updates · Jul 31, 2026
- openSUSE-SU-2026:11381-1 valkey-9.1.1-1.1 on GA media SUSE / openSUSE Security Updates · Jul 27, 2026
References
- https://github.com/valkey-io/valkey/security/advisories/GHSA-53mc-f3m3-99vh
- https://github.com/valkey-io/valkey/pull/4234
- https://github.com/valkey-io/valkey/commit/7cd5bcb7575d750ec2de618db80da58680a10fe3
- https://github.com/valkey-io/valkey/releases/tag/7.2.14
- https://github.com/valkey-io/valkey/releases/tag/8.0.10
- https://github.com/valkey-io/valkey/releases/tag/8.1.9
- https://github.com/valkey-io/valkey/releases/tag/9.0.5
- https://github.com/valkey-io/valkey/releases/tag/9.1.1