Valkey is a high-performance, open-source, in-memory data store used as a database, cache, and message broker. It is a community-driven fork of Redis, created in 2024 after Redis changed its license to a more restrictive model. Valkey retains full Redis compatibility and remains under the permissive BSD license, ensuring it's free and open-source for all use cases.

Valkey

Oracle Linux is a Linux distribution packaged and freely distributed by Oracle, available partially under the GNU General Public License since late 2006. It is compiled from Red Hat Enterprise Linux source code, replacing Red Hat branding with Oracle's.

Linux Oracle

ELSA-2025-21916:  valkey security update (IMPORTANT)

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-49844	CRITICAL	9.9	Redis	cpe:2.3:a:redis:redis	No	Yes	Oct 03, 2025
CVE-2025-46817	HIGH	8.8	Redis	valkey-devel	No	Yes	Oct 03, 2025
CVE-2025-46818	HIGH	7.3	Redis	redis:7::redis-devel	No	Yes	Oct 03, 2025
CVE-2025-46819	HIGH	7.1	Redis	redict	No	Yes	Oct 03, 2025
ELSA-2025-21916	HIGH	N/A	Valkey	valkey	No	Yes	Nov 25, 2025

ELSA-2025-21916:
Valkey vulnerability analysis and mitigation

Related Valkey vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

ELSA-2025-21916: Valkey vulnerability analysis and mitigation