AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-92925

Redis community: out-of-bounds read

Red Hat

CVE-2026-92925 · Published Sep 17, 2026 · updated Nov 5, 2026

High7.1
No fix yet
Red Hat advisory

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

Affected versions

PackageAffectedFixed in
Pen Drive Powered by Red Hat Lightspeed
Product
all versionsNo fix yet
Red Hat 3scale API Management Platform 2
Product
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
Red Hat Enterprise Linux 8
Product
all versionsNo fix yet
Red Hat Enterprise Linux 9
Product
all versionsNo fix yet
Red Hat Hardened Images
Product
all versionsNo fix yet
Details and references

More Red Hat advisories

All Red Hat