CVE-2024-46981: debian debian_linux Use After Free
CVSS: 9.8v3.1CriticalAnalyzed
AliasesALPINE-CVE-2024-46981SUSE-SU-2025:0162-1RHSA-2025:0398RHSA-2025:0399RHSA-2025:0400RHSA-2025:0566RHSA-2025:0640RHSA-2025:0685RHSA-2025:0689UBUNTU-CVE-2024-46981DEBIAN-CVE-2024-46981DLA-4025-1CGA-3f62-jq4v-7x93CGA-4ffc-c6cr-v89mCGA-52fw-3qmj-2v2gCGA-7mhv-rqfj-g2q7CGA-7v3c-pqr8-vvm8CGA-87gf-rwmr-53jrCGA-9354-xj95-wgw9CGA-95fj-w67h-33m8CGA-9wcq-h9r8-7hpvCGA-c4vf-8m99-xp34CGA-c89q-w5q5-f89gCGA-f33q-gjfm-w8g4CGA-ffr9-jmxx-2cj7CGA-g3q6-3h5m-25hmCGA-g7vq-vhx2-g86cCGA-jf4p-h25q-w2jwCGA-m79m-w6w5-hrvpCGA-p28c-mm5x-rg59CGA-p2j9-45px-mj94CGA-p53r-mf99-577mCGA-p643-pf46-4wh7CGA-q7hr-w4mg-gxrhCGA-q85j-8cpw-qp5jCGA-w8q5-2h4h-8mmfCGA-x33c-7xv5-ggj8CGA-xfcc-9wjv-4hvf
Published 06-01-2025Last modified 19-03-2025
Vulnerability summary
CVE-2024-46981 is a critical (CVSS 9.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 8.18% chance of exploitation in the next 30 days, higher than 94.8% of scored vulnerabilities. 2 public exploits are recorded.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
8.18%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference
Advisory lineage
Upstream 0 · Downstream 13 · Related 12Timeline
- 06-01-2025PublishedVulnerability first disclosed.
- 19-03-2025Last modifiedVulnerability information updated.
Description
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
CVSS metrics
7 scores · 7 sources · 1 versionCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources7 sources · 7.0–9.8
- CVE.orgCNA7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
8.18%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
+0.01 pp
From 8.17% on 20-09-2026
20-09-202620-10-2026
EPSS score8.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (vicarius.io)
Maturity: unknown
Exploit Reference (vicarius.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Chainguard13 products
- py3-redisAll versions (No fix recorded)
- py3.10-redisAll versions (No fix recorded)
- py3.11-redisAll versions (No fix recorded)
- py3.12-redisAll versions (No fix recorded)
- py3.13-redisAll versions (No fix recorded)
Suse10 products
- redis&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 6.2.6-150400.3.31.1
- redis&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 6.2.6-150400.3.31.1
- redis&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 6.2.6-150400.3.31.1
- redis&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 6.2.6-150400.3.31.1
- redis&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 6.2.6-150400.3.31.1
Redhat5 products
- redis< 0:6.2.7-1.el9_2.1 | < 0:6.2.7-1.el9_4.1 | < 0:6.2.6-1.el9_0.1 | < 0:7.0.12-1.module+el9.4.0+22724+5f7cf862.2 | < 0:6.2.7-1.module+el8.8.0+22725+e1c935f8.1 | < 0:6.0.9-5.module+el8.4.0+22739+cf3cc450.1 | < 0:6.0.9-5.module+el8.6.0+22735+5bedcf81.1
- redis-debuginfo< 0:6.2.7-1.el9_2.1 | < 0:6.2.7-1.el9_4.1 | < 0:6.2.6-1.el9_0.1 | < 0:7.0.12-1.module+el9.4.0+22724+5f7cf862.2 | < 0:6.2.7-1.module+el8.8.0+22725+e1c935f8.1 | < 0:6.0.9-5.module+el8.4.0+22739+cf3cc450.1 | < 0:6.0.9-5.module+el8.6.0+22735+5bedcf81.1
- redis-debugsource< 0:6.2.7-1.el9_2.1 | < 0:6.2.7-1.el9_4.1 | < 0:6.2.6-1.el9_0.1 | < 0:7.0.12-1.module+el9.4.0+22724+5f7cf862.2 | < 0:6.2.7-1.module+el8.8.0+22725+e1c935f8.1 | < 0:6.0.9-5.module+el8.4.0+22739+cf3cc450.1 | < 0:6.0.9-5.module+el8.6.0+22735+5bedcf81.1
- redis-devel< 0:6.2.7-1.el9_2.1 | < 0:6.2.7-1.el9_4.1 | < 0:6.2.6-1.el9_0.1 | < 0:7.0.12-1.module+el9.4.0+22724+5f7cf862.2 | < 0:6.2.7-1.module+el8.8.0+22725+e1c935f8.1 | < 0:6.0.9-5.module+el8.4.0+22739+cf3cc450.1 | < 0:6.0.9-5.module+el8.6.0+22735+5bedcf81.1
- redis-doc< 0:6.2.7-1.el9_2.1 | < 0:6.2.7-1.el9_4.1 | < 0:6.2.6-1.el9_0.1 | < 0:7.0.12-1.module+el9.4.0+22724+5f7cf862.2 | < 0:6.2.7-1.module+el8.8.0+22725+e1c935f8.1 | < 0:6.0.9-5.module+el8.4.0+22739+cf3cc450.1 | < 0:6.0.9-5.module+el8.6.0+22735+5bedcf81.1
Debian4 products
- redict< 7.3.2+ds-1
- redis< 5:7.0.15-1~deb12u3 | < 5:7.0.15-3 | < 5:6.0.16-1+deb11u5
- valkey< 8.0.2+dfsg1-1
- debian_linuxEOL11.0
Ubuntu3 products
- redictAll versions (No fix recorded)
- redis< 2:2.8.4-2ubuntu0.2+esm4 | < 2:3.0.6-1ubuntu0.4+esm3 | < 5:4.0.9-1ubuntu0.2+esm5 | < 5:5.0.7-2ubuntu0.1+esm3 | < 5:6.0.16-1ubuntu1+esm2 | < 5:7.0.15-1ubuntu0.24.04.1
- valkey< 7.2.8+dfsg1-0ubuntu0.24.04.2
Alpine2 products
- redis≥ 6.2.0, < 6.2.18-r0 | ≥ 6.2.0, < 7.0.15-r2 | ≥ 6.2.0, < 7.2.7-r0
- valkey< 7.2.8-r0
Redis1 product
- redis< 6.2.17 | ≥ 6.2.0, < 6.2.17 | ≥ 7.2.0, < 7.2.7 | ≥ 7.4.0, < 7.4.2
7 vendors · 38 products
References
38 links- github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4cX Refsource CONFIRMARTICLEREPORTAdvisoryVendor Advisory
- www.vicarius.io/vsociety/posts/cve-2024-46981-detect-redis-vulnerabilityWEBExploitThird Party Advisory
- www.vicarius.io/vsociety/posts/cve-2024-46981-mitigate-redis-vulnerabilityWEBExploitThird Party Advisory
