Bug 2481446 - CVE-2026-23631 valkey: Remote code execution via use-after-free in Lua scripting [fedora-all]
Summary: CVE-2026-23631 valkey: Remote code execution via use-after-free in Lua script...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: valkey
Version: rawhide
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
Assignee: Jonathan Wright
QA Contact:
URL:
Whiteboard: {"flaws": ["271953d0-0b6d-4814-a857-2...
Depends On:
Blocks: CVE-2026-23631
TreeView+ depends on / blocked
 
Reported: 2026-05-26 13:41 UTC by Lukas Javorsky
Modified: 2026-05-26 14:07 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-05-26 14:07:39 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Lukas Javorsky 2026-05-26 13:41:27 UTC 
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Comment 1 Petr Khartskhaev 2026-05-26 14:07:39 UTC 
Fixed as part of https://bodhi.fedoraproject.org/updates/FEDORA-2026-9d34041502 https://bodhi.fedoraproject.org/updates/FEDORA-2026-114b1e5d3a https://bodhi.fedoraproject.org/updates/FEDORA-2026-76cf27ea56 https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e31dafe5c
Note You need to log in before you can comment on or make changes to this bug.