Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2026-3091)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3091 advisory. A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys...

CVE-2026-82677

A flaw was found in valkey-io valkey. A remote attacker could exploit a double free vulnerability in the moduleTimerHandler function within the Module Timer subsystem src/module.c. This flaw could lead to a denial of service. Mitigation Restrict access to high-privilege administrative users capab...

valkey: Valkey: Denial of Service via double free in Module Timer subsystem

A flaw was found in valkey-io valkey. A remote attacker could exploit a double free vulnerability in the moduleTimerHandler function within the Module Timer subsystem src/module.c. This flaw could lead to a denial of service...

CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677 valkey-io valkey Module Timer module.c moduleTimerHandler double free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677

CVE-2026-82677 affects valkey-io valkey 9.1.0 , specifically the function moduleTimerHandler in the Module Timer Subsystem (src/module.c). The root cause is a double free that can be triggered remotely, though exploitation requires high privileges and user interaction . The impact is limited to l...

CVE-2026-82677 valkey-io valkey Module Timer module.c moduleTimerHandler double free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

EUVD-2026-68457

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677 valkey-io valkey Module Timer module.c moduleTimerHandler double free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677: Double Free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

PT-2026-83776

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0 Description A double free issue exists in the Module Timer Subsystem within the moduleTimerHandler function located in the src/module.c file. This flaw allows a remote attacker to trigger a double free, which...

CVE-2026-82677: Double Free

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...