CVE-2024-0985 is a vulnerability in PostgreSQL where a non-owner executing the 'REFRESH MATERIALIZED VIEW CONCURRENTLY' command can execute arbitrary SQL. This represents a privilege escalation risk, as users without ownership privileges can perform unauthorized SQL execution. Red Hat Product Security has rated this issue as important and released a security update for Red Hat Enterprise Linux 9.2 Extended Update Support. The advisory references Red Hat Security Advisory RHSA-2024:1241, which provides the patch and update instructions.

The vulnerability allows non-owner database users to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This elevates the risk of privilege escalation within the database environment. No known exploits in the wild have been reported at the time of the advisory. The issue affects PostgreSQL installations on Red Hat Enterprise Linux 9.2 Extended Update Support.

Red Hat has released an official security update that fixes this vulnerability. Users should apply the update as described in Red Hat Advisory RHSA-2024:1241. The PostgreSQL service will be automatically restarted after the update is installed. No additional mitigation steps are required beyond applying the official patch.