Use-after-free in Redis - CVE-2025-49844

Vulnerability identifier: #VU116609

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-49844

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error. A remote user can use a specially crafted Lua script to manipulate the garbage collector and execute arbitrary code on the target system.

Redis
Valkey
Debian Linux
SUSE Manager Proxy 4.3
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
BIG-IP Next CNF
BIG-IP Next SPK
BIG-IP Next for Kubernetes
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Fedora
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Ubuntu
Server Applications Module
openSUSE Leap
openEuler
Apex One
IBM Observability with Instana
EasyApache
Red Hat OpenShift GitOps
Oracle Communications Operations Monitor
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
lua-bitop (Ubuntu package)
redis (Ubuntu package)
lua5.1 (Ubuntu package)
redis-debuginfo
redis
redis-debugsource
redis (Red Hat package)
redis6-doc
redis6-devel
redis6-debugsource
redis6-debuginfo
redis6
redis-doc
redis-devel
redis7-debugsource
redis7
redis7-debuginfo
redis (Debian package)
valkey (Ubuntu package)
redict (Ubuntu package)
valkey
valkey (Red Hat package)
valkey-devel
valkey-debugsource
valkey-debuginfo
valkey-compat-redis
valkey (Debian package)
IBM Aspera Desktop Client
IBM Aspera High-Speed Transfer Endpoint
IBM Aspera High-Speed Transfer Server
Juniper Junos Space

Install updates from vendor's website.

Redis - addressed in versions 6.2.20, 7.2.11, 7.4.6, 8.0.4, 8.2.2
IBM Observability with Instana - update to 1.0.307
Red Hat OpenShift GitOps - addressed in versions 1.16.5, 1.17.3, 1.18.2
EasyApache - update to 4 25-31
Valkey - addressed in versions 7.2.11, 8.0.6, 8.1.4
lua-bitop (Ubuntu package) - addressed in versions 1.0.2-5ubuntu0.20.04.1~esm2, 1.0.2-5ubuntu0.22.04.1~esm2, 2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2, 2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2, 2:3.0.6-1ubuntu0.4+esm5, 5:4.0.9-1ubuntu0.2+esm7, 5.1.5-8.1ubuntu0.20.04.1~esm1, 5.1.5-8.1ubuntu0.22.04.1~esm1, 5:7.0.15-1ubuntu0.24.04.4
redis (Ubuntu package) - addressed in versions 2:2.8.4-2ubuntu0.2+esm5, 2:3.0.6-1ubuntu0.4+esm4, 5:4.0.9-1ubuntu0.2+esm6, 5:5.0.7-2ubuntu0.1+esm4, 5:6.0.16-1ubuntu1.1, 5:7.0.15-1ubuntu0.24.04.2, 5:7.0.15-3ubuntu0.1, 5:8.0.2-3ubuntu0.25.10.1
IBM Aspera Desktop Client - update to 4.4.7
IBM Aspera High-Speed Transfer Server - update to 4.4.7
IBM Aspera High-Speed Transfer Endpoint - update to 4.4.7
lua5.1 (Ubuntu package) - update to 5.1.5-8ubuntu1+esm1
redis-debuginfo - addressed in versions 6.0.14-150200.6.43.1, 6.2.6-150400.3.40.1, 7.2.4-150600.3.18.1
redis - addressed in versions 6.0.14-150200.6.43.1, 6.2.6-150400.3.40.1, 7.2.4-150600.3.18.1
redis-debugsource - addressed in versions 6.0.14-150200.6.43.1, 6.2.6-150400.3.40.1, 7.2.4-150600.3.18.1
redis (Red Hat package) - addressed in versions 6.2.6-1.el9_0.5, 6.2.7-1.el9_2.5, 6.2.7-1.el9_4.5, 6.2.20-1.el9_6
redis6-doc - addressed in versions 6.2.7-4, 6.2.7-6
redis6-devel - addressed in versions 6.2.7-4, 6.2.7-6
redis6-debugsource - addressed in versions 6.2.7-4, 6.2.7-6
redis6-debuginfo - addressed in versions 6.2.7-4, 6.2.7-6
redis6 - addressed in versions 6.2.7-4, 6.2.7-6
redis-doc - addressed in versions 6.2.20-1.0.1, 7.2.10-3
redis-devel - addressed in versions 6.2.20-1.0.1, 7.2.10-3
redis - addressed in versions 6.2.20-1.0.1, 7.2.10-3
redis7-debugsource - addressed in versions 7.0.8-150500.3.24.1, 7.0.8-150600.8.19.1
redis7 - addressed in versions 7.0.8-150500.3.24.1, 7.0.8-150600.8.19.1
redis7-debuginfo - addressed in versions 7.0.8-150500.3.24.1, 7.0.8-150600.8.19.1
redis (Debian package) - addressed in versions 5:7.0.15-1~deb12u6, 5:8.0.2-3+deb13u1
valkey (Ubuntu package) - addressed in versions 7.2.11+dfsg1-0ubuntu0.2, 8.0.6+dfsg1-0ubuntu0.2, 8.1.4+dfsg1-0ubuntu0.2
redis-debuginfo - update to 7.2.11-1
redis - update to 7.2.11-1
redis-debugsource - update to 7.2.11-1
redict (Ubuntu package) - addressed in versions 7.3.2+ds-1ubuntu0.1, 7.3.5+ds-1ubuntu0.1
valkey - addressed in versions 8.0.6-1.el8, 8.0.6-1.el9, 8.0.6-1.fc41, 8.0.6-1.fc42, 8.1.4-1.fc43
valkey (Red Hat package) - addressed in versions 8.0.6-1.el10_0, 8.0.6-2.el9_7, 8.0.6-2.el10_1
valkey-devel - addressed in versions 8.0.6-150600.13.17.1, 8.0.6-150700.3.11.1
valkey - addressed in versions 8.0.6-150600.13.17.1, 8.0.6-150700.3.11.1
valkey-debugsource - addressed in versions 8.0.6-150600.13.17.1, 8.0.6-150700.3.11.1
valkey-debuginfo - addressed in versions 8.0.6-150600.13.17.1, 8.0.6-150700.3.11.1
valkey-compat-redis - addressed in versions 8.0.6-150600.13.17.1, 8.0.6-150700.3.11.1
valkey (Debian package) - update to 8.1.1+dfsg1-3+deb13u1
Juniper Junos Space - update to 26.1R1 Patch V1

• Exploit #12369 - redis-cve_2025_49844 (February 6, 2026)
• Exploit #12248 - CVE-2025-49844_POC (January 4, 2026)
• Exploit #12114 - CVE-2025-49844 (November 14, 2025)
• Exploit #12091 - cve-2025-49844 (November 7, 2025)
• Exploit #12035 - CVE-2025-49844 (October 24, 2025)
• Exploit #12006 - redis_exploit (October 8, 2025)
• Exploit #12005 - CVE-2025-49844 (October 8, 2025)
• Exploit #12002 - redis-CVE-2025-49844 (October 8, 2025)

• https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539
• https://github.com/redis/redis/releases/tag/8.2.2
• https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q

• Remote code execution in Redis
• Remote code execution in Valkey
• Fedora 43 update for valkey
• Fedora 42 update for valkey
• Fedora 41 update for valkey
• Fedora EPEL 8 update for valkey
• Fedora EPEL 9 update for valkey
• Debian update for redis
• SUSE update for valkey
• SUSE update for redis7
• cPanel EasyApache4 update for third-party components
• SUSE update for redis7
• SUSE update for valkey
• SUSE update for redis
• SUSE update for redis
• SUSE update for redis
• Debian update for valkey
• openEuler 24.03 LTS update for redis
• openEuler 24.03 LTS SP2 update for redis
• Ubuntu update for redis
• Ubuntu update for redict
• Ubuntu update for redis
• openEuler 22.03 LTS SP3 update for redis
• openEuler 20.03 LTS SP4 update for redis
• openEuler 24.03 LTS SP1 update for redis
• openEuler 22.03 LTS SP4 update for redis
• Red Hat Enterprise Linux 9 update for the redis:7 module
• Red Hat Enterprise Linux 9 update for redis
• Multiple vulnerabilities in IBM Aspera High-Speed Transfer Server, IBM Aspera High-Speed Transfer Endpoint and IBM Aspera Desktop Client
• Red Hat Enterprise Linux 9 update for redis
• Red Hat Enterprise Linux 9 update for redis
• Red Hat Enterprise Linux 9 update for redis
• Red Hat Enterprise Linux 8 update for the redis:6 module
• Red Hat Enterprise Linux 8 update for the redis:6 module
• Red Hat Enterprise Linux 8 update for the redis:6 module
• Red Hat Enterprise Linux 9 update for the redis:7 module
• Anolis OS update for redis:6 module
• Red Hat Enterprise Linux 10 update for valkey
• Red Hat Enterprise Linux 8 update for the redis:6 module
• Red Hat Enterprise Linux 9 update for the redis:7 module
• Anolis OS update for redis
• Remote code execution in Trend Micro Apex One Redis component
• Red Hat Enterprise Linux 9 update for valkey
• Red Hat Enterprise Linux 10 update for valkey
• Ubuntu update for valkey
• openEuler 24.03 LTS update for redis6
• openEuler 22.03 LTS SP4 update for redis6
• openEuler 22.03 LTS SP3 update for redis6
• openEuler 20.03 LTS SP4 update for redis6
• openEuler 24.03 LTS SP1 update for redis6
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.16
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.18
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.17
• Remote code execution in BIG-IP Next dSSM component
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Multiple vulnerabilities in IBM Observability with Instana
• Ubuntu update for lua-bitop
• Ubuntu update for lua5.1
• Multiple vulnerabilities in Junos Space