RHSA-2026:3443

Vulnerability from csaf_redhat - Published: 2026-02-26 15:21 - Updated: 2026-02-27 02:46
Summary
Red Hat Security Advisory: valkey security update

Notes

Topic
An update for valkey is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733) * valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for valkey is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.  You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set.  In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log.  Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth.  Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache.  You can use Valkey from most programming languages also.\n\nSecurity Fix(es):\n\n* Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733)\n\n* valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:3443",
        "url": "https://access.redhat.com/errata/RHSA-2026:3443"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2442025",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442025"
      },
      {
        "category": "external",
        "summary": "2442026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442026"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3443.json"
      }
    ],
    "title": "Red Hat Security Advisory: valkey security update",
    "tracking": {
      "current_release_date": "2026-02-27T02:46:46+00:00",
      "generator": {
        "date": "2026-02-27T02:46:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.1"
        }
      },
      "id": "RHSA-2026:3443",
      "initial_release_date": "2026-02-26T15:21:30+00:00",
      "revision_history": [
        {
          "date": "2026-02-26T15:21:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-26T15:21:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-02-27T02:46:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-0:8.0.7-1.el10_1.src",
                "product": {
                  "name": "valkey-0:8.0.7-1.el10_1.src",
                  "product_id": "valkey-0:8.0.7-1.el10_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey@8.0.7-1.el10_1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-0:8.0.7-1.el10_1.aarch64",
                "product": {
                  "name": "valkey-0:8.0.7-1.el10_1.aarch64",
                  "product_id": "valkey-0:8.0.7-1.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey@8.0.7-1.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-0:8.0.7-1.el10_1.aarch64",
                "product": {
                  "name": "valkey-devel-0:8.0.7-1.el10_1.aarch64",
                  "product_id": "valkey-devel-0:8.0.7-1.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-devel@8.0.7-1.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
                "product": {
                  "name": "valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
                  "product_id": "valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debugsource@8.0.7-1.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
                "product": {
                  "name": "valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
                  "product_id": "valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.7-1.el10_1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-0:8.0.7-1.el10_1.ppc64le",
                "product": {
                  "name": "valkey-0:8.0.7-1.el10_1.ppc64le",
                  "product_id": "valkey-0:8.0.7-1.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey@8.0.7-1.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-0:8.0.7-1.el10_1.ppc64le",
                "product": {
                  "name": "valkey-devel-0:8.0.7-1.el10_1.ppc64le",
                  "product_id": "valkey-devel-0:8.0.7-1.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-devel@8.0.7-1.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
                "product": {
                  "name": "valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
                  "product_id": "valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debugsource@8.0.7-1.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
                "product": {
                  "name": "valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
                  "product_id": "valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.7-1.el10_1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-0:8.0.7-1.el10_1.s390x",
                "product": {
                  "name": "valkey-0:8.0.7-1.el10_1.s390x",
                  "product_id": "valkey-0:8.0.7-1.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey@8.0.7-1.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-0:8.0.7-1.el10_1.s390x",
                "product": {
                  "name": "valkey-devel-0:8.0.7-1.el10_1.s390x",
                  "product_id": "valkey-devel-0:8.0.7-1.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-devel@8.0.7-1.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debugsource-0:8.0.7-1.el10_1.s390x",
                "product": {
                  "name": "valkey-debugsource-0:8.0.7-1.el10_1.s390x",
                  "product_id": "valkey-debugsource-0:8.0.7-1.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debugsource@8.0.7-1.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
                "product": {
                  "name": "valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
                  "product_id": "valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.7-1.el10_1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-0:8.0.7-1.el10_1.x86_64",
                "product": {
                  "name": "valkey-0:8.0.7-1.el10_1.x86_64",
                  "product_id": "valkey-0:8.0.7-1.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey@8.0.7-1.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-0:8.0.7-1.el10_1.x86_64",
                "product": {
                  "name": "valkey-devel-0:8.0.7-1.el10_1.x86_64",
                  "product_id": "valkey-devel-0:8.0.7-1.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-devel@8.0.7-1.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
                "product": {
                  "name": "valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
                  "product_id": "valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debugsource@8.0.7-1.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
                "product": {
                  "name": "valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
                  "product_id": "valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/valkey-debuginfo@8.0.7-1.el10_1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-0:8.0.7-1.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64"
        },
        "product_reference": "valkey-0:8.0.7-1.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-0:8.0.7-1.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le"
        },
        "product_reference": "valkey-0:8.0.7-1.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-0:8.0.7-1.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x"
        },
        "product_reference": "valkey-0:8.0.7-1.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-0:8.0.7-1.el10_1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src"
        },
        "product_reference": "valkey-0:8.0.7-1.el10_1.src",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-0:8.0.7-1.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64"
        },
        "product_reference": "valkey-0:8.0.7-1.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debuginfo-0:8.0.7-1.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64"
        },
        "product_reference": "valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le"
        },
        "product_reference": "valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debuginfo-0:8.0.7-1.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x"
        },
        "product_reference": "valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debuginfo-0:8.0.7-1.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64"
        },
        "product_reference": "valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debugsource-0:8.0.7-1.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64"
        },
        "product_reference": "valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debugsource-0:8.0.7-1.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le"
        },
        "product_reference": "valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debugsource-0:8.0.7-1.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x"
        },
        "product_reference": "valkey-debugsource-0:8.0.7-1.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-debugsource-0:8.0.7-1.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64"
        },
        "product_reference": "valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-0:8.0.7-1.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64"
        },
        "product_reference": "valkey-devel-0:8.0.7-1.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-0:8.0.7-1.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le"
        },
        "product_reference": "valkey-devel-0:8.0.7-1.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-0:8.0.7-1.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x"
        },
        "product_reference": "valkey-devel-0:8.0.7-1.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-0:8.0.7-1.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
        },
        "product_reference": "valkey-devel-0:8.0.7-1.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-67733",
      "cwe": {
        "id": "CWE-170",
        "name": "Improper Null Termination"
      },
      "discovery_date": "2026-02-23T21:03:05.837152+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2442025"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts. Successful exploitation could lead to corrupting or returning tampered data to other users on the same connection, impacting data integrity and availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT flaw in Valkey, a distributed key-value database, where a malicious user can inject arbitrary data into the response stream via Lua scripting commands. This could lead to data corruption or tampering for other clients sharing the same connection. Exploitation requires the ability to execute scripting commands within Valkey.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-67733"
        },
        {
          "category": "external",
          "summary": "RHBZ#2442025",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442025"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-67733",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-67733"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-67733",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67733"
        },
        {
          "category": "external",
          "summary": "https://github.com/valkey-io/valkey/security/advisories/GHSA-p876-p7q5-hv2m",
          "url": "https://github.com/valkey-io/valkey/security/advisories/GHSA-p876-p7q5-hv2m"
        }
      ],
      "release_date": "2026-02-23T19:39:29.136000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-26T15:21:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3443"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts"
    },
    {
      "cve": "CVE-2026-21863",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-02-23T21:03:12.281522+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2442026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Valkey, a distributed key-value database. A malicious actor with access to the Valkey clusterbus port can exploit an input validation vulnerability by sending a specially crafted invalid clusterbus packet. This lack of validation for clusterbus ping extension packets can lead to an out-of-bounds read. Consequently, this may cause the system to crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "valkey: Valkey: Denial of Service via invalid clusterbus packet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated High severity by Red Hat Product Security, because Valkey is commonly deployed as a network-accessible service or embedded within applications that accept remote input over standard network interfaces. In such environments, a remote attacker can trigger the vulnerability by sending specially crafted data to the service. Successful exploitation results in a service crash, leading to a denial-of-service condition. Although no confidentiality or integrity impacts are observed, the ability to repeatedly crash the service over the network justifies a High availability impact rating.\n\nThis vulnerability affects Valkey deployments where the cluster bus connection is exposed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
          "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
          "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21863"
        },
        {
          "category": "external",
          "summary": "RHBZ#2442026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21863",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21863"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21863",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21863"
        },
        {
          "category": "external",
          "summary": "https://github.com/valkey-io/valkey/security/advisories/GHSA-c677-q3wr-gggq",
          "url": "https://github.com/valkey-io/valkey/security/advisories/GHSA-c677-q3wr-gggq"
        }
      ],
      "release_date": "2026-02-23T19:41:28.783000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-26T15:21:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3443"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the Valkey cluster bus port. Configure network access control lists (ACLs) or firewall rules to ensure that only trusted hosts can connect to the cluster bus port. This limits the attack surface by preventing unauthorized actors from sending malicious clusterbus packets.",
          "product_ids": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.src",
            "AppStream-10.1.Z:valkey-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debuginfo-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-debugsource-0:8.0.7-1.el10_1.x86_64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.aarch64",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.ppc64le",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.s390x",
            "AppStream-10.1.Z:valkey-devel-0:8.0.7-1.el10_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "valkey: Valkey: Denial of Service via invalid clusterbus packet"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.