Bug 2466828 (CVE-2026-25243)
| Summary: | CVE-2026-25243 redis: RESTORE invalid memory access may allow remote code execution | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitrary code execution.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2480506, 2480507 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-05-05 18:01:35 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:23229 https://access.redhat.com/errata/RHSA-2026:23229 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:25216 https://access.redhat.com/errata/RHSA-2026:25216 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:25219 https://access.redhat.com/errata/RHSA-2026:25219 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:25925 https://access.redhat.com/errata/RHSA-2026:25925 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:26008 https://access.redhat.com/errata/RHSA-2026:26008 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:26233 https://access.redhat.com/errata/RHSA-2026:26233 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:26306 https://access.redhat.com/errata/RHSA-2026:26306 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:26540 https://access.redhat.com/errata/RHSA-2026:26540 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:27716 https://access.redhat.com/errata/RHSA-2026:27716 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Via RHSA-2026:27787 https://access.redhat.com/errata/RHSA-2026:27787 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:28139 https://access.redhat.com/errata/RHSA-2026:28139 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:28142 https://access.redhat.com/errata/RHSA-2026:28142 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:29817 https://access.redhat.com/errata/RHSA-2026:29817 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:33427 https://access.redhat.com/errata/RHSA-2026:33427 |