Out-of-Bounds Read Vulnerability in Redis Cluster Bus Packet Parser
CVE-2026-92925
6MEDIUM
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 17 September 2026
What is CVE-2026-92925?
The Redis community version features a vulnerability in its cluster bus PING/PONG/MEET packet parser, where it failed to properly null-terminate strings carrying extensions. This oversight permits crafted packets to invoke out-of-bounds reads, which could compromise data confidentiality or result in a remote denial of service. It's crucial to apply updates from trusted sources to mitigate these risks effectively.
Affected Version(s)
Red Hat Enterprise Linux 9 9080020260821173335.9
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 9040020260917140622.9
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260917140656.9