Description
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Redis | Redis | < 8.8.0 | 8.8.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | redis | 5:7.0.15-1~deb12u9 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | redis | No fix yet | — |
| Ubuntu 26.04 LTS | redis | No fix yet | — |
| Ubuntu 24.04 LTS | redis | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | redis | No fix yet | — |
| Ubuntu Pro 20.04 LTS | redis | No fix yet | — |
| Ubuntu Pro 18.04 LTS | redis | No fix yet | — |
| Ubuntu Pro 16.04 LTS | redis | No fix yet | — |
| Ubuntu Pro 14.04 LTS | redis | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | valkey +1 | 8.0.11-1.el10_2 | RHSA-2026:64796 |
| RHEL 9 | redis +2 | 6.2.24-1.el9_8 | RHSA-2026:65120, RHSA-2026:64824 |
| RHEL 9 | valkey +1 | 8.0.10-1.el9_8 | RHSA-2026:64807 |
| RHEL 8 | redis +2 | 6.2.24-1.module+el8.10.0+24746+7b800ac5 | RHSA-2026:64823 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | valkey +1 | 8.0.11-1.el10_0 | RHSA-2026:68601 |
| RHEL 9.6 EUS | redis +2 | 6.2.24-1.el9_6 | RHSA-2026:69520, RHSA-2026:67461 |
| RHEL 9.4 E4S | redis +2 | 6.2.7-1.el9_4.7 | RHSA-2026:69861, RHSA-2026:69521 |
| RHEL 9.2 E4S | redis +2 | 6.2.7-1.el9_2.7 | RHSA-2026:69862 |
| RHEL 8.8 TUS | redis +2 | 6.2.7-1.module+el8.8.0+24912+36dda224.8 | RHSA-2026:69533 |
| RHEL 8.8 E4S | redis +2 | 6.2.7-1.module+el8.8.0+24912+36dda224.8 | RHSA-2026:69533 |
| RHEL 8.6 EUS Long Life | redis +2 | 6.0.9-5.module+el8.6.0+24913+caade4b4.8 | RHSA-2026:69534 |
| RHEL 8.6 AUS | redis +2 | 6.0.9-5.module+el8.6.0+24913+caade4b4.8 | RHSA-2026:69534 |
| RHEL 8.4 EUS Long Life | redis +2 | 6.0.9-5.module+el8.4.0+24914+3cb9e211.7 | RHSA-2026:69542 |
| RHEL 8.4 AUS | redis +2 | 6.0.9-5.module+el8.4.0+24914+3cb9e211.7 | RHSA-2026:69542 |
| Red Hat Hardened Images 1 | valkey +5 | 9.0.5-0.1.hum1 | RHSA-2026:43236 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | valkey +1 | 8.0.11-1.el10_2 | ALSA-2026:64796 |
| AlmaLinux 9 | redis +2 | 6.2.24-1.el9_8 | ALSA-2026:64824 |
| AlmaLinux 9 | valkey +1 | 8.0.10-1.el9_8 | ALSA-2026:64807 |
| AlmaLinux 8 | redis +2 | 6.2.24-1.module_el8.10.0+4271+7f8f19af | ALSA-2026:64823 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | valkey | 8.0.11-1.el10_2 | RLSA-2026:64796 |
| Rocky Linux 9 | redis | 6.2.24-1.el9_8 | RLSA-2026:65120, RLSA-2026:64824 |
| Rocky Linux 9 | valkey | 8.0.10-1.el9_8 | RLSA-2026:64807 |
| Rocky Linux 8 | redis | 6.2.24-1.module+el8.10.0+40313+282db117 | RLSA-2026:64823 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | redis | 7.2.4-150600.3.27.1 | SUSE-SU-2026:3638-1 |
| SLES 15 SP6 | redis7 | 7.0.8-150600.8.28.1 | SUSE-SU-2026:3639-1 |
| SLES 15 SP5 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
| SLES 15 SP5 | redis7 | 7.0.8-150500.3.34.1 | SUSE-SU-2026:3636-1 |
| SLES 15 SP4 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | redis | 7.2.4-150600.3.27.1 | SUSE-SU-2026:3638-1 |
| SLES for SAP 15 SP6 | redis7 | 7.0.8-150600.8.28.1 | SUSE-SU-2026:3639-1 |
| SLES for SAP 15 SP5 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
| SLES for SAP 15 SP5 | redis7 | 7.0.8-150500.3.34.1 | SUSE-SU-2026:3636-1 |
| SLES for SAP 15 SP4 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
| SLE HPC 15 SP5 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
| SLE HPC 15 SP5 | redis7 | 7.0.8-150500.3.34.1 | SUSE-SU-2026:3636-1 |
| SLE HPC 15 SP4 | redis | 6.2.6-150400.3.49.1 | SUSE-SU-2026:3637-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | valkey | No fix yet | — |
Advisories 29
- ALSA-2026:64807 Important: valkey security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64824 Important: redis security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64823 Important: redis:6 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:69521 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:69520 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:65120 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:43236 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 6, 2026
- WID-SEC-2026-2599 Redis: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Oct 4, 2026
- RHSA-2026:69542 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69862 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69534 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69533 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69861 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:68601 Red Hat Security Advisory: valkey security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:67461 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64824 Red Hat Security Advisory: redis security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64823 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64807 Red Hat Security Advisory: valkey security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64796 Red Hat Security Advisory: valkey security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RLSA-2026:65120 Important: redis:7 security update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64796 Important: valkey security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64807 Important: valkey security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64824 Important: redis security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64823 Important: redis:6 security update Rocky Linux Security Advisories · Sep 9, 2026
- SUSE-SU-2026:3638-1 Security update for redis SUSE / openSUSE Security Updates · Aug 18, 2026
- SUSE-SU-2026:3639-1 Security update for redis7 SUSE / openSUSE Security Updates · Aug 18, 2026
- SUSE-SU-2026:3636-1 Security update for redis7 SUSE / openSUSE Security Updates · Aug 18, 2026
- SUSE-SU-2026:3637-1 Security update for redis SUSE / openSUSE Security Updates · Aug 18, 2026