CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets
Remote attackers can trigger out-of-bounds reads in Redis cluster bus packets, leading to sensitive information disclosure or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-92925?
CVE-2026-92925 is a high-severity vulnerability in Pen Drive Powered by Red Hat Lightspeed, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
Weakness: CWE-125
Which versions are affected by CVE-2026-92925?
Linux distribution packages (15)
redis7 SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 7.0.8-150500.3.40.1 |
redis7 SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 7.0.8-150500.3.40.1 |
valkey SUSE:Linux Enterprise Module for Server Applications 15 SP7 | All versions | 8.0.10-150700.3.26.1 |
redis7 SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 7.0.8-150500.3.40.1 |
redis SUSE:Linux Enterprise Server 15 SP6-LTSS | All versions | 7.2.4-150600.3.33.1 |
redis7 SUSE:Linux Enterprise Server 15 SP6-LTSS | All versions | 7.0.8-150600.8.34.1 |
valkey SUSE:Linux Enterprise Server 15 SP6-LTSS | All versions | 8.0.10-150600.13.31.1 |
valkey SUSE:Linux Enterprise Server 16.0 | All versions | 8.0.10-160000.2.1 |
redis7 SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 7.0.8-150500.3.40.1 |
redis SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | All versions | 7.2.4-150600.3.33.1 |
redis7 SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | All versions | 7.0.8-150600.8.34.1 |
valkey SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | All versions | 8.0.10-150600.13.31.1 |
valkey SUSE:Linux Enterprise Server for SAP applications 16.0 | All versions | 8.0.10-160000.2.1 |
valkey openSUSE:Leap 16.0 | All versions | 8.0.10-160000.2.1 |
valkey openSUSE:Tumbleweed | All versions | 9.1.2-3.1 |
How do I fix CVE-2026-92925?
Apply the vendor's patch.
Is CVE-2026-92925 being exploited?
There is no known exploitation of CVE-2026-92925 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-92925, GHSA-3gvw-xg56-j2xm, SUSE-SU-2026:23986-1, SUSE-SU-2026:4370-1, SUSE-SU-2026:4375-1, SUSE-SU-2026:4377-1 and 5 more.