High

Redis: redis: out-of-bounds read via crafted cluster bus packets

Type: advisorySource: Official CVE List1 source record

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

Announced 17 Sept 2026Source revision 1

Original source ↗

CVE-2026-92925

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-92925

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.6 Extended Update Support

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Pen Drive Powered by Red Hat Lightspeed

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat 3scale API Management Platform 2

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat 3scale API Management Platform 2

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat 3scale API Management Platform 2

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "9080020260821173335.9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redis:7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "9040020260917140622.9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redis:7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "9060020260917140656.9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redis:7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:pdrive_lightspeed:1"
    ],
    "vendor": "Red Hat",
    "product": "Pen Drive Powered by Red Hat Lightspeed",
    "packageName": "pen-drive/pen-drive-scanner-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:red_hat_3scale_amp:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat 3scale API Management Platform 2",
    "packageName": "3scale-amp2/backend-rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:red_hat_3scale_amp:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat 3scale API Management Platform 2",
    "packageName": "3scale-amp2/system-rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:red_hat_3scale_amp:2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat 3scale API Management Platform 2",
    "packageName": "3scale-amp2/system-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "packageName": "valkey",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "packageName": "redis:6/redis",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "packageName": "redis",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "packageName": "valkey",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "packageName": "valkey",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2026-92925
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #50002 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 13:59:21 GMT
Publisher date: Thu, 17 Sep 2026 11:48:04 GMT

Read the original announcement