CVE-2026-92925: Redis: redis: out-of-bounds read via crafted cluster bus packets

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-28
Weakness: CWE-125

Description

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

Affected products

Red Hat Pen Drive Powered by Red Hat Lightspeed: all versions
Red Hat Enterprise Linux 10: all versions — fixed in 0:8.0.7-1.el10_1
Red Hat Enterprise Linux 9: all versions — fixed in 0:8.0.7-1.el9_7
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: all versions — fixed in 9040020260917140622.9
Red Hat Enterprise Linux 9.6 Extended Update Support: all versions — fixed in 9060020260917140656.9
Red Hat Hardened Images: all versions

How to fix

Upgrade to a fixed version: Red Hat Enterprise Linux 10 0:8.0.7-1.el10_1; Red Hat Enterprise Linux 9 0:8.0.7-1.el9_7; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 9040020260917140622.9; Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260917140656.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-92925 or the next vulnerability affects your stack