Description
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Redis | Redis | < 8.8.2, < 8.2.9, < 8.4.6, < 8.6.6, < 8.10.1, < 7.4.11, < 6.2.24, < 7.2.16 | 8.2.9 |
| Redis | Redis Software (Enterprise) | < 8.2.0-46, < 8.0.20-96, < 7.22.2-179, < 7.8.6-303 | 8.2.0-46 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | redis | 5:8.0.6-3 | — |
| Debian 13 | redis | 5:8.0.2-3+deb13u3 | — |
| Debian 12 | redis | 5:7.0.15-1~deb12u10 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | redis | 5:8.0.5-1ubuntu0.1 | USN-8866-1 |
| Ubuntu 24.04 LTS | redis | 5:7.0.15-1ubuntu0.24.04.5 | USN-8866-1 |
| Ubuntu 22.04 LTS | redis | 5:6.0.16-1ubuntu1.2 | USN-8866-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | redis +2 | 6.2.24-1.el9_8 | RHSA-2026:65120, RHSA-2026:64824 |
| RHEL 8 | redis +2 | 6.2.24-1.module+el8.10.0+24746+7b800ac5 | RHSA-2026:64823 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.6 EUS | redis +2 | 6.2.24-1.el9_6 | RHSA-2026:69520, RHSA-2026:67461 |
| RHEL 9.4 E4S | redis +2 | 6.2.7-1.el9_4.7 | RHSA-2026:69861, RHSA-2026:69521 |
| RHEL 9.2 E4S | redis +2 | 6.2.7-1.el9_2.7 | RHSA-2026:69862 |
| RHEL 8.8 TUS | redis +2 | 6.2.7-1.module+el8.8.0+24912+36dda224.8 | RHSA-2026:69533 |
| RHEL 8.8 E4S | redis +2 | 6.2.7-1.module+el8.8.0+24912+36dda224.8 | RHSA-2026:69533 |
| RHEL 8.6 EUS Long Life | redis +2 | 6.0.9-5.module+el8.6.0+24913+caade4b4.8 | RHSA-2026:69534 |
| RHEL 8.6 AUS | redis +2 | 6.0.9-5.module+el8.6.0+24913+caade4b4.8 | RHSA-2026:69534 |
| RHEL 8.4 EUS Long Life | redis +2 | 6.0.9-5.module+el8.4.0+24914+3cb9e211.7 | RHSA-2026:69542 |
| RHEL 8.4 AUS | redis +2 | 6.0.9-5.module+el8.4.0+24914+3cb9e211.7 | RHSA-2026:69542 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | redis +2 | 6.2.24-1.el9_8 | ALSA-2026:64824 |
| AlmaLinux 8 | redis +2 | 6.2.24-1.module_el8.10.0+4271+7f8f19af | ALSA-2026:64823 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | redis | 6.2.24-1.el9_8 | RLSA-2026:65120, RLSA-2026:64824 |
| Rocky Linux 8 | redis | 6.2.24-1.module+el8.10.0+40313+282db117 | RLSA-2026:64823 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | redis | 7.2.4-150600.3.30.1 | SUSE-SU-2026:3990-1 |
| SLES 15 SP6 | redis7 | 7.0.8-150600.8.31.1 | SUSE-SU-2026:3991-1 |
| SLES 15 SP5 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
| SLES 15 SP5 | redis7 | 7.0.8-150500.3.37.1 | SUSE-SU-2026:4069-1 |
| SLES 15 SP4 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | redis | 7.2.4-150600.3.30.1 | SUSE-SU-2026:3990-1 |
| SLES for SAP 15 SP6 | redis7 | 7.0.8-150600.8.31.1 | SUSE-SU-2026:3991-1 |
| SLES for SAP 15 SP5 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
| SLES for SAP 15 SP5 | redis7 | 7.0.8-150500.3.37.1 | SUSE-SU-2026:4069-1 |
| SLES for SAP 15 SP4 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
| SLE HPC 15 SP5 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
| SLE HPC 15 SP5 | redis7 | 7.0.8-150500.3.37.1 | SUSE-SU-2026:4069-1 |
| SLE HPC 15 SP4 | redis | 6.2.6-150400.3.52.1 | SUSE-SU-2026:4068-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | valkey | No fix yet | — |
Advisories 23
- ALSA-2026:64824 Important: redis security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64823 Important: redis:6 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:69520 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:69521 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:65120 Red Hat Security Advisory: redis:7 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- USN-8866-1 redis vulnerabilities Ubuntu Security Notices (USN) · Oct 8, 2026
- WID-SEC-2026-3077 Redis: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026
- RHSA-2026:69862 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69542 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69534 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69533 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:69861 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:67461 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64824 Red Hat Security Advisory: redis security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- RHSA-2026:64823 Red Hat Security Advisory: redis:6 security update Red Hat Security Advisories (RHSA) · Sep 22, 2026
- SUSE-SU-2026:4068-1 Security update for redis SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4069-1 Security update for redis7 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:3990-1 Security update for redis SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:3991-1 Security update for redis7 SUSE / openSUSE Security Updates · Sep 13, 2026
- RLSA-2026:65120 Important: redis:7 security update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64824 Important: redis security, bug fix, and enhancement update Rocky Linux Security Advisories · Sep 9, 2026
- RLSA-2026:64823 Important: redis:6 security update Rocky Linux Security Advisories · Sep 9, 2026
- VA-26-239-01 Redis TLS pending-data list use-after-free CISA ICS & IT advisories · Aug 31, 2026
References
- url patch
- url exploit
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url third-party-advisory
- url vdb-entry
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes
- url release-notes