CVE-2026-82677
CVE-2026-82677: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium4.9
Medium [CVE-2026-82677] Denial of Service via double free in Module Timer subsystem
CVE-2026-82677Source published Source updated
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: b349fe2821e3998534b1454c1b64a478daf8c6b7. To fix this issue, it is recommended to deploy a patch. This flaw could lead to a denial of service. Execution remains confined within the process runtime environment, mitigated by default SELinux policies and container isolation preventing host-level escalation. Red Hat severity: Moderate — CVSS 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-1341. Affected Red Hat products: Red Hat Hardened Images; Red Hat…
- Affected products in this advisory
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat package: valkey
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- valkey-main-9.0.6-0.1.hum1
- RHSA-2026:61884
- Mitigation guidance
- Restrict access to high-privilege administrative users capable of executing module timer operations, or isolate the Valkey service using network firewalls and RBAC controls until fixed packages are installed.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.