CVE-2026-56684: Valkey Tls Iterator Use After Free

Iterating over pending connections using listIter/listNext while invoking event handlers like tlsHandleEvent can lead to use-after-free if callbacks synchronously close connections and delete nodes from the list.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-56684-valkey-tls-iterator-use-after-free --engine opengrep

Description

Iterating over pending connections using listIter/listNext while invoking event handlers like tlsHandleEvent can lead to use-after-free if callbacks synchronously close connections and delete nodes from the list.