Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2099-1

Опубликовано: 27 мая 2026
Источник: suse-cvrf

Описание

Security update for redis

This update for redis fixes the following issues

  • CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution (bsc#1264164).
  • CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution (bsc#1264165).
  • CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to remote code execution (bsc#1264166).

Список пакетов

SUSE Linux Enterprise Server 15 SP6-LTSS
redis-7.2.4-150600.3.24.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
redis-7.2.4-150600.3.24.1

Ссылки

Описание

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.

Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:redis-7.2.4-150600.3.24.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6:redis-7.2.4-150600.3.24.1
Ссылки

Описание

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.

Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:redis-7.2.4-150600.3.24.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6:redis-7.2.4-150600.3.24.1
Ссылки

Описание

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.

Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:redis-7.2.4-150600.3.24.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6:redis-7.2.4-150600.3.24.1
Ссылки
Уязвимость SUSE-SU-2026:2099-1