CVE-2026-92925 PUBLISHED

Redis: redis: out-of-bounds read via crafted cluster bus packets

Assigner: redhat
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 18.09.2026

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Score: 7.1

Product Status

Vendor Red Hat
Product Pen Drive Powered by Red Hat Lightspeed
Versions Default: affected
Vendor Red Hat
Product Red Hat 3scale API Management Platform 2
Versions Default: affected
Vendor Red Hat
Product Red Hat 3scale API Management Platform 2
Versions Default: affected
Vendor Red Hat
Product Red Hat 3scale API Management Platform 2
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Hardened Images
Versions Default: affected

Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

References

Problem Types

  • Out-of-bounds Read CWE