CVE-2026-92925

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92925
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92925.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92925
Downstream
ALSA (1)
DEBIAN (1)
OESA (4)
openSUSE (2)
RHSA (3)
SUSE (6)
UBUNTU (1)
Related
ALSA (1)
openSUSE (2)
SUSE (6)
Published
2026-09-17T11:48:04Z
Modified
2026-10-29T11:42:20Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
Redis: redis: out-of-bounds read via crafted cluster bus packets
Details

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-125"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92925.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:8.0.7-1.el10_1"
                        },
                        {
                            "fixed":  "0:8.0.7-1.el9_7"
                        },
                        {
                            "fixed":  "9080020260821173335.9"
                        },
                        {
                            "fixed":  "9040020260917140622.9"
                        },
                        {
                            "fixed":  "9060020260917140656.9"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/redis/redis

Affected ranges

Type
GIT
Repo
https://github.com/redis/redis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
37894faeea11e2db28b9fc2af378a762d2c36523
Fixed
5279a8d44818a5ca51e9abb91a9b8ce481d3c88b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "37894faeea11e2db28b9fc2af378a762d2c36523"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "8.10.0",
            "range":  [
                {
                    "fixed":  "5279a8d44818a5ca51e9abb91a9b8ce481d3c88b"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

1.*
1.3.6
2.*
2.2-alpha0
2.2-alpha1
2.2-alpha2
2.2-alpha3
2.2-alpha4
2.2-alpha5
2.2-alpha6
2.2.0-rc1
2.3-alpha0
8.*
8.4-int
v1.*
v1.3.10
v1.3.11
v1.3.7
v1.3.8
v1.3.9
v2.*
v2.0.0-rc1
v2.1.1-watch
Other
vm-playpen

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92925.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "13279014130636900447888149085080901188",
                "66450121725317823420902280751939412249",
                "94100035610033848263607306682728551612",
                "116644692456477797365927837214807213373",
                "127024583072053186129462409419977113981",
                "89149673714987742241634026751059035615",
                "31285712546404403212188135398719013128",
                "239689532422510736080321087532888670017",
                "99878103810376704475268591093493230626",
                "97737256664382199430702003548256822764",
                "91259257128675313053010695061663281647",
                "205500128442031084785654296787376237943"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-92925-5d0a7e6b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523",
        "target":  {
            "file":  "src/cluster_legacy.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "230046582170578232748377566269448724473",
            "length":  76
        },
        "id":  "CVE-2026-92925-6ba0679e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523",
        "target":  {
            "file":  "src/cluster_legacy.c",
            "function":  "auxShardIdPresent"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "145298396018917868586487560831436167436",
            "length":  13693
        },
        "id":  "CVE-2026-92925-ff566eb3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523",
        "target":  {
            "file":  "src/cluster_legacy.c",
            "function":  "clusterProcessPacket"
        }
    }
]
vanir_signatures_modified 
"2026-10-29T07:22:56Z"