CVE catalog

CVE-2026-56684

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Jul 26, 2026, 12:00:00 AM UTC
Updated: Aug 18, 2026, 3:16:55 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.89% · Oct 25, 2026

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	valkey	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey-redis-compat	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey-sentinel	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey-server	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey-tools	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Debian	redict	14	`7.3.0+ds-1`	vulnerable
Debian	redict	14	`7.3.0+ds-2`	vulnerable
Debian	redict	14	`7.3.0+ds-3`	vulnerable
Debian	redict	14	`7.3.0+ds-3~bpo12+1`	vulnerable
Debian	redict	14	`7.3.1+ds-1`	vulnerable
Debian	redict	14	`7.3.2+ds-1`	vulnerable
Debian	redict	14	`7.3.2+ds-1~bpo12+1`	vulnerable
Debian	redict	14	`7.3.5+ds-1`	vulnerable
Debian	redict	14	`7.3.5+ds-1~bpo12+1`	vulnerable
Debian	redict	14	`7.3.6+ds-1`	vulnerable
Debian	redict	14	`7.3.6+ds-1~bpo12+1`	vulnerable
Debian	redict	14	`7.3.6+ds-1~bpo13+1`	vulnerable
Debian	redict	14	`7.3.6+ds-2`	vulnerable
Debian	redict	14	`7.3.6+ds-2~bpo12+1`	vulnerable
Debian	redict	14	`7.3.6+ds-2~bpo13+1`	vulnerable
Debian	redict	14	`7.3.6+ds-3`	vulnerable
Debian	valkey	13	`8.1.1+dfsg1-3`	vulnerable
Debian	valkey	13	`8.1.1+dfsg1-3+deb13u1`	vulnerable
Debian	valkey	13	`8.1.1+dfsg1-3+deb13u2`	vulnerable
Debian	valkey	13	`8.1.1+dfsg1-3+deb13u3`	fixed
Debian	valkey	14	`8.1.1+dfsg1-3`	vulnerable
Debian	valkey	14	`8.1.4+dfsg1-1`	vulnerable
Debian	valkey	14	`8.1.4+dfsg1-2`	vulnerable
Debian	valkey	14	`9.1.1-1`	fixed
Ubuntu	valkey	pro	`7.2.5+dfsg1-2ubuntu4~24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.7+dfsg1-0ubuntu0.24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.2`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.3`	vulnerable
Ubuntu	valkey	pro	`7.2.10+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.11+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.11+dfsg1-0ubuntu0.2`	vulnerable
Ubuntu	valkey	pro	`7.2.12+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.13+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey	26.04	`8.1.3+dfsg1-0ubuntu2`	vulnerable
Ubuntu	valkey	26.04	`8.1.4+dfsg1-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.2-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.3-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.3-0ubuntu2`	vulnerable
Ubuntu	valkey	26.04	`9.0.4-0ubuntu0.1`	vulnerable
Ubuntu	valkey	26.04	`9.0.4-0ubuntu0.2`	fixed
Ubuntu	valkey	pro	`7.2.5+dfsg1-2ubuntu4~24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.7+dfsg1-0ubuntu0.24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.1`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.2`	vulnerable
Ubuntu	valkey	pro	`7.2.8+dfsg1-0ubuntu0.24.04.3`	vulnerable
Ubuntu	valkey	pro	`7.2.10+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.11+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.11+dfsg1-0ubuntu0.2`	vulnerable
Ubuntu	valkey	pro	`7.2.12+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.13+dfsg1-0ubuntu0.1`	vulnerable
Ubuntu	valkey	pro	`7.2.13+dfsg1-0ubuntu0.1+esm1`	fixed
Ubuntu	valkey	26.04	`8.1.3+dfsg1-0ubuntu2`	vulnerable
Ubuntu	valkey	26.04	`8.1.4+dfsg1-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.2-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.3-0ubuntu1`	vulnerable
Ubuntu	valkey	26.04	`9.0.3-0ubuntu2`	vulnerable
Ubuntu	valkey	26.04	`9.0.4-0ubuntu0.1`	vulnerable
Ubuntu	valkey	26.04	`9.0.4-0ubuntu0.2`	fixed
Suse	valkey	linux enterprise server 15 sp6-ltss	`8.0.10-150600.13.28.1`	fixed
Suse	valkey	linux enterprise server for sap applications 15 sp6	`8.0.10-150600.13.28.1`	fixed
Opensuse	valkey	leap 16.0	`8.0.10-160000.1.1`	fixed
Suse	valkey	linux enterprise module for server applications 15 sp7	`8.0.10-150700.3.20.1`	fixed
Opensuse	valkey	tumbleweed	`9.1.1-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	valkey	deb	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	Not reported	Not reported
Ubuntu	valkey-redis-compat	deb	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	Not reported	Not reported
Ubuntu	valkey-sentinel	deb	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	Not reported	Not reported
Ubuntu	valkey-server	deb	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	Not reported	Not reported
Ubuntu	valkey-tools	deb	noble	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	Not reported	Not reported
Debian	valkey	deb	13	`8.1.1+dfsg1-3+deb13u3`	Not reported	DEBIAN-CVE-2026-56684	Not reported
Debian	valkey	deb	14	`9.1.1-1`	Not reported	DEBIAN-CVE-2026-56684	Not reported
Ubuntu	valkey	deb	pro	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	USN-8771-1	Not reported
Ubuntu	valkey	deb	26.04	`9.0.4-0ubuntu0.2`	Not reported	USN-8771-1	Not reported
Ubuntu	valkey	deb	pro	`7.2.13+dfsg1-0ubuntu0.1+esm1`	Not reported	UBUNTU-CVE-2026-56684	Not reported
Ubuntu	valkey	deb	26.04	`9.0.4-0ubuntu0.2`	Not reported	UBUNTU-CVE-2026-56684	Not reported
Suse	valkey	rpm	linux enterprise server 15 sp6-ltss	`8.0.10-150600.13.28.1`	Not reported	SUSE-SU-2026:3483-1	Not reported
Suse	valkey	rpm	linux enterprise server for sap applications 15 sp6	`8.0.10-150600.13.28.1`	Not reported	SUSE-SU-2026:3483-1	Not reported
Opensuse	valkey	rpm	leap 16.0	`8.0.10-160000.1.1`	Not reported	OPENSUSE-SU-2026:21485-1	Not reported
Suse	valkey	rpm	linux enterprise module for server applications 15 sp7	`8.0.10-150700.3.20.1`	Not reported	SUSE-SU-2026:3427-1	Not reported
Opensuse	valkey	rpm	tumbleweed	`9.1.1-1.1`	Not reported	OPENSUSE-SU-2026:11381-1	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[valkey-sentinel]Affected
Source package: [valkey]
Details (5)
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
[valkey-server]Affected
Source package: [valkey]
Details (5)
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
[valkey-tools]Affected
Source package: [valkey]
Details (5)
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · amd64 · trixie-security · Historical version
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u2 · arm64 · trixie-security
  Affected · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13
- 8.1.1+dfsg1-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 8.1.1+dfsg1-3+deb13u3
  nvd · valkey · debian · 13

[openSUSE Tumbleweed]

[valkey-compat-redis]Unknown
Source package: [valkey]
Details (1)
- 9.1.1-1.2 · noarch · tumbleweed
  Unknown · Fixed: 9.1.1-1.1
  Version impact unknown
  nvd · valkey · opensuse · tumbleweed
[valkey-devel]Unknown
Source package: [valkey]
Details (1)
- 9.1.1-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 9.1.1-1.1
  Version impact unknown
  nvd · valkey · opensuse · tumbleweed
[valkey]Fixed
Source package: [valkey]
Details (1)
- 9.1.1-1.2 · x86_64 · tumbleweed
  Fixed · Fixed: 9.1.1-1.1
  nvd · valkey · opensuse · tumbleweed

Observed: Oct 27, 2026, 7:11:34 AM UTC

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]