SUSE-SU-2026:0848-1: valkey&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:0848-1 is a vulnerability in valkey&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 07-03-2026PublishedVulnerability first disclosed.
- 10-03-2026Last modifiedVulnerability information updated.
Description
Security update for valkey This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts (bsc#1258746). - CVE-2026-21863: denial of service via invalid clusterbus packet (bsc#1258788). Other updates and bugfixes: - ltrim should not call signalModifiedKey when no elements are removed (#2787) - chained replica crash when doing dual channel replication (#2983) - used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005) - avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#3160) - server assert on ACL LOAD and resetchannels (#3182) - bug causing no response flush sometimes when IO threads are busy (#3205)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- valkey&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 8.0.7-150700.3.14.1
1 vendor · 1 product