Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-18T14:19:51 valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-825

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.

A flaw was found in Valkey. An authenticated client can trigger a `CLIENT KILL` command while the `tlsProcessPendingData` function iterates a pending list. This action causes `connTLSClose` to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport Layer Security (TLS) is enabled, may result in a server crash or potentially allow a remote attacker to achieve arbitrary code execution.

Restrict network access to the Valkey instance to trusted clients and networks by configuring firewall rules to limit inbound connections to the Valkey service port. Ensure only authorized and authenticated clients can connect. If TLS is not strictly required, consider disabling it. These network restrictions will persist if the Valkey service is reloaded or restarted. Red Hat Enterprise Linux 10 2026-09-08T00:00:00Z RHSA-2026:64796 valkey-0:8.0.11-1.el10_2 Red Hat Enterprise Linux 10.0 Extended Update Support 2026-09-17T00:00:00Z RHSA-2026:68601 valkey-0:8.0.11-1.el10_0 Red Hat Enterprise Linux 9 2026-09-08T00:00:00Z RHSA-2026:64807 valkey-0:8.0.10-1.el9_8 Red Hat Hardened Images 2026-09-01T00:00:00Z RHSA-2026:61884 valkey-main-9.0.6-0.1.hum1 https://www.cve.org/CVERecord?id=CVE-2026-56684 https://nvd.nist.gov/vuln/detail/CVE-2026-56684 https://github.com/valkey-io/valkey/commit/7cd5bcb7575d750ec2de618db80da58680a10fe3 https://github.com/valkey-io/valkey/pull/4234 https://github.com/valkey-io/valkey/releases/tag/7.2.14 https://github.com/valkey-io/valkey/releases/tag/8.0.10 https://github.com/valkey-io/valkey/releases/tag/8.1.9 https://github.com/valkey-io/valkey/releases/tag/9.0.5 https://github.com/valkey-io/valkey/releases/tag/9.1.1 https://github.com/valkey-io/valkey/security/advisories/GHSA-53mc-f3m3-99vh