Vulnpedia
← All CVEs

CVE-2026-23631

MEDIUM 6.1 ALL-YEARS

Published 2026-05-05 · Last modified 2026-07-16 · GitHub_M · NVD: Modified

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

3.1%chance of exploitation in 30 days · 88th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

6.1CVSS 4.0 · MEDIUM · CNA

  • ConfidentialityNone
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Redis Red Hat

Products Redis Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 9.4 Update Services For Sap Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Hardened Images Red Hat Enterprise Linux 8

Weakness (CWE)

  • CWE-416: : Use After Free

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

References and research data (JSON)

Vendor product assessments

Showing 32 of 127 vendor product statements; 95 omitted. Read the full vendor advisory.

  • valkey-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-debugsource-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-devel-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-debugsource-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-devel-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.src (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.4.0%2B24450%2Be284b512.8?arch=src&rpmmod=redis:7:9040020260625094332:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-debugsource-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.4.0%2B24450%2Be284b512.8?arch=aarch64&rpmmod=redis:7:9040020260625094332:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-devel-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.4.0%2B24450%2Be284b512.8?arch=ppc64le&rpmmod=redis:7:9040020260625094332:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=noarch&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-devel-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-0:9.0.4-0.1.hum1@src as a component of Red Hat Hardened Images · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-devel-0:9.0.4-0.1.hum1@aarch64 as a component of Red Hat Hardened Images · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • valkey-rdma-0:9.0.4-0.1.hum1@x86_64 as a component of Red Hat Hardened Images · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/redis

    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    • none available: Affected
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-devel as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/redis-devel

    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    • none available: Affected
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-doc as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/redis-doc

    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    • none available: Affected
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis.src as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/redis?arch=src

    • workaround: To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure. For Redis configuration, edit the `redis.conf` file to include or verify: `replica-read-only yes` After modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability.
    • none available: Affected
    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-devel (redis:6) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/redis-devel?rpmmod=redis:6

    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis-doc (redis:6) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/redis-doc?rpmmod=redis:6

    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis.src (redis:6) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/redis?arch=src&rpmmod=redis:6

    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • redis (redis:6) as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/redis?rpmmod=redis:6

    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00
  • boost.src as a component of Red Hat Hardened Images · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:rpm/redhat/[email protected]?arch=src

    Red Hat · CVE-2026-23631 · Updated 2026-10-06T17:38:40+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

2 candidates

Known Affected Software Configurations

VendorProductVersion range
RedisRedis< 8.6.3

All CVSS metrics

  • MEDIUM 6.1 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
  • HIGH 8.8 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • MEDIUM 6.1 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • HIGH 8.1 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
  • HIGH 8.8 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS