Vulnerability-Lookup

URL	Tags
https://github.com/vllm-project/vllm/security/adv…	x_refsource_CONFIRM
https://github.com/vllm-project/vllm/pull/44971	x_refsource_MISC
https://github.com/vllm-project/vllm/commit/f2197…	x_refsource_MISC

Vendor	Product	Version	CPE status
vllm-project	vllm	Affected: >= 0.5.5, < 0.23.1rc0	guessed

FKIE_CVE-2026-53923

Vulnerability from fkie_nvd - Published: 2026-06-22 23:16 - Updated: 2026-06-24 16:51

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure. This vulnerability is fixed in 0.23.1rc0.

References

URL	Tags
security-advisories@github.com	https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e	Patch
security-advisories@github.com	https://github.com/vllm-project/vllm/pull/44971	Issue Tracking
security-advisories@github.com	https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4	Third Party Advisory

Impacted products

	Vendor	Product	Version
	vllm	vllm	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "vllm",
          "vendor": "vllm-project",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.5.5, \u003c 0.23.1rc0"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC2E4E13-D3B7-4A9F-AF31-A9CD7753B6F4",
              "versionEndExcluding": "0.23.1",
              "versionStartIncluding": "0.5.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users\u0027 inference requests, constituting information disclosure. This vulnerability is fixed in 0.23.1rc0."
    }
  ],
  "id": "CVE-2026-53923",
  "lastModified": "2026-06-24T16:51:00.307",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-53923",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-23T15:04:15.555317Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-22T23:16:30.737",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://github.com/vllm-project/vllm/pull/44971"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-681"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-5JV2-G5WQ-CMR4

Vulnerability from github – Published: 2026-06-17 14:03 – Updated: 2026-07-17 16:20

Summary

vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

Details

Summary

Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure.

Root Cause

The to_cuda_ggml_t function pointer type at ggml-common.h:1067 declares its element count parameter as int (32-bit):

using to_cuda_ggml_t = void (*)(const void * __restrict__ x,
                                dst_t * __restrict__ y,
                                int k,              // 32-bit
                                cudaStream_t stream);

All dequantize kernel functions (dequantize_block_cuda, dequantize_row_q2_K_cuda, etc. in dequantize.cuh) inherit this int k parameter and use it as the kernel launch grid size:

static void dequantize_block_cuda(..., const int k, cudaStream_t stream) {
    const int num_blocks = (k + 2*CUDA_DEQUANTIZE_BLOCK_SIZE - 1) / (2*CUDA_DEQUANTIZE_BLOCK_SIZE);
    dequantize_block<<<num_blocks, CUDA_DEQUANTIZE_BLOCK_SIZE, 0, stream>>>(vx, y, k);
}

In ggml_dequantize() at gguf_kernel.cu:85, the caller passes m * n (an int64_t product) to this int k parameter:

at::Tensor DW = torch::empty({m, n}, options);    // line 80: full-size, UNINITIALIZED
// ...
to_cuda((void*)W.data_ptr(), (scalar_t*)DW.data_ptr(), m * n, stream);  // line 85: m*n truncated to int

When m * n > INT_MAX, the truncated k is smaller than the actual tensor size. The kernel processes k elements. The remaining (m * n) - k elements in DW are never written and contain stale GPU memory.

This is a single root cause -- the int type on the k parameter in to_cuda_ggml_t -- with a single fix: change int k to int64_t k. All dequantize functions inherit this type through the same typedef.

Affected Functions

All in csrc/quantization/gguf/gguf_kernel.cu:

Function	Line	Allocation	Info Disclosure?
`ggml_dequantize`	74	`torch::empty({m, n})` at line 80	Yes -- `m*n` truncated to `int k` at line 85
`ggml_mul_mat_vec_a8`	91	`torch::empty({vecs, row})` at line 99	Yes -- `int col = X.sizes()[1]` at line 94
`ggml_mul_mat_a8`	207	`torch::empty({batch, row})` at line 215	Yes -- `int col = X.sizes()[1]` at line 210
`ggml_moe_a8`	279	`torch::empty({tokens*top_k, row})` at line 289	Yes -- `int col = X.sizes()[1]` at line 285

All four functions allocate output tensors with torch::empty (uninitialized) and then run CUDA kernels that use truncated dimension values as loop bounds. The unfilled portion of each output tensor retains stale GPU memory.

ggml_moe_a8_vec (line 382) uses torch::zeros instead of torch::empty, so it is not affected by the info disclosure variant.

Impact: Information Disclosure in Multi-Tenant Serving

vLLM is designed for multi-tenant inference serving. GPU memory is reused across requests from different users. When the dequantize kernel partially fills an output tensor:

The output tensor DW is allocated with torch::empty -- the buffer contains whatever was previously in that GPU memory region
The dequantize kernel fills only a truncated portion of the buffer
The unfilled portion retains residual data from prior GPU operations, which may include tensor data from other users' inference requests
The contaminated tensor proceeds through the model computation
No error or warning is generated -- the partial fill is silent

This is a confidentiality violation. In shared inference deployments (the primary vLLM use case), one user's inference data can leak into another user's model computation through residual GPU memory.

Attacker Control

The attacker crafts a GGUF model file with weight tensor dimensions whose product exceeds INT_MAX (e.g., a matrix with shape [65536, 65536] gives m * n = 4,294,967,296). The model is hosted on HuggingFace or any model hub. The victim loads the model with vLLM for inference serving. The truncation happens automatically during model weight dequantization.

Fix

A fix for this vulnerability was added here: https://github.com/vllm-project/vllm/pull/44971

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.3 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "vllm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.5.5"
            },
            {
              "fixed": "0.24.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-53923"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
      "CWE-681"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-06-17T14:03:11Z",
    "nvd_published_at": "2026-06-22T23:16:30Z",
    "severity": "MODERATE"
  },
  "details": "## Summary\n\nInteger truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels (`csrc/quantization/gguf/gguf_kernel.cu`) causes partial tensor processing. The output tensor is allocated at full size via `torch::empty` (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users\u0027 inference requests, constituting information disclosure.\n\n## Root Cause\n\nThe `to_cuda_ggml_t` function pointer type at `ggml-common.h:1067` declares its element count parameter as `int` (32-bit):\n\n```cpp\nusing to_cuda_ggml_t = void (*)(const void * __restrict__ x,\n                                dst_t * __restrict__ y,\n                                int k,              // 32-bit\n                                cudaStream_t stream);\n```\n\nAll dequantize kernel functions (`dequantize_block_cuda`, `dequantize_row_q2_K_cuda`, etc. in `dequantize.cuh`) inherit this `int k` parameter and use it as the kernel launch grid size:\n\n```cpp\nstatic void dequantize_block_cuda(..., const int k, cudaStream_t stream) {\n    const int num_blocks = (k + 2*CUDA_DEQUANTIZE_BLOCK_SIZE - 1) / (2*CUDA_DEQUANTIZE_BLOCK_SIZE);\n    dequantize_block\u003c\u003c\u003cnum_blocks, CUDA_DEQUANTIZE_BLOCK_SIZE, 0, stream\u003e\u003e\u003e(vx, y, k);\n}\n```\n\nIn `ggml_dequantize()` at `gguf_kernel.cu:85`, the caller passes `m * n` (an `int64_t` product) to this `int k` parameter:\n\n```cpp\nat::Tensor DW = torch::empty({m, n}, options);    // line 80: full-size, UNINITIALIZED\n// ...\nto_cuda((void*)W.data_ptr(), (scalar_t*)DW.data_ptr(), m * n, stream);  // line 85: m*n truncated to int\n```\n\nWhen `m * n \u003e INT_MAX`, the truncated `k` is smaller than the actual tensor size. The kernel processes `k` elements. The remaining `(m * n) - k` elements in `DW` are never written and contain stale GPU memory.\n\nThis is a single root cause -- the `int` type on the `k` parameter in `to_cuda_ggml_t` -- with a single fix: change `int k` to `int64_t k`. All dequantize functions inherit this type through the same typedef.\n\n## Affected Functions\n\nAll in `csrc/quantization/gguf/gguf_kernel.cu`:\n\n| Function | Line | Allocation | Info Disclosure? |\n|----------|------|-----------|-----------------|\n| `ggml_dequantize` | 74 | `torch::empty({m, n})` at line 80 | Yes -- `m*n` truncated to `int k` at line 85 |\n| `ggml_mul_mat_vec_a8` | 91 | `torch::empty({vecs, row})` at line 99 | Yes -- `int col = X.sizes()[1]` at line 94 |\n| `ggml_mul_mat_a8` | 207 | `torch::empty({batch, row})` at line 215 | Yes -- `int col = X.sizes()[1]` at line 210 |\n| `ggml_moe_a8` | 279 | `torch::empty({tokens*top_k, row})` at line 289 | Yes -- `int col = X.sizes()[1]` at line 285 |\n\nAll four functions allocate output tensors with `torch::empty` (uninitialized) and then run CUDA kernels that use truncated dimension values as loop bounds. The unfilled portion of each output tensor retains stale GPU memory.\n\n`ggml_moe_a8_vec` (line 382) uses `torch::zeros` instead of `torch::empty`, so it is not affected by the info disclosure variant.\n\n## Impact: Information Disclosure in Multi-Tenant Serving\n\nvLLM is designed for multi-tenant inference serving. GPU memory is reused across requests from different users. When the dequantize kernel partially fills an output tensor:\n\n1. The output tensor `DW` is allocated with `torch::empty` -- the buffer contains whatever was previously in that GPU memory region\n2. The dequantize kernel fills only a truncated portion of the buffer\n3. The unfilled portion retains residual data from prior GPU operations, which may include tensor data from other users\u0027 inference requests\n4. The contaminated tensor proceeds through the model computation\n5. No error or warning is generated -- the partial fill is silent\n\nThis is a confidentiality violation. In shared inference deployments (the primary vLLM use case), one user\u0027s inference data can leak into another user\u0027s model computation through residual GPU memory.\n\n## Attacker Control\n\nThe attacker crafts a GGUF model file with weight tensor dimensions whose product exceeds `INT_MAX` (e.g., a matrix with shape `[65536, 65536]` gives `m * n = 4,294,967,296`). The model is hosted on HuggingFace or any model hub. The victim loads the model with vLLM for inference serving. The truncation happens automatically during model weight dequantization.\n\n## Fix\n\nA fix for this vulnerability was added here: https://github.com/vllm-project/vllm/pull/44971",
  "id": "GHSA-5jv2-g5wq-cmr4",
  "modified": "2026-07-17T16:20:57Z",
  "published": "2026-06-17T14:03:11Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/pull/44971"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-5jv2-g5wq-cmr4"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2026-3403.yaml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/vllm-project/vllm"
    },
    {
      "type": "WEB",
      "url": "https://pypi.org/project/vllm"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving"
}

PYSEC-2026-3403

Vulnerability from pysec - Published: 2026-07-13 15:46 - Updated: 2026-07-13 16:07

Details

Summary

Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure.

Root Cause

The to_cuda_ggml_t function pointer type at ggml-common.h:1067 declares its element count parameter as int (32-bit):

using to_cuda_ggml_t = void (*)(const void * __restrict__ x,
                                dst_t * __restrict__ y,
                                int k,              // 32-bit
                                cudaStream_t stream);

All dequantize kernel functions (dequantize_block_cuda, dequantize_row_q2_K_cuda, etc. in dequantize.cuh) inherit this int k parameter and use it as the kernel launch grid size:

static void dequantize_block_cuda(..., const int k, cudaStream_t stream) {
    const int num_blocks = (k + 2*CUDA_DEQUANTIZE_BLOCK_SIZE - 1) / (2*CUDA_DEQUANTIZE_BLOCK_SIZE);
    dequantize_block<<<num_blocks, CUDA_DEQUANTIZE_BLOCK_SIZE, 0, stream>>>(vx, y, k);
}

In ggml_dequantize() at gguf_kernel.cu:85, the caller passes m * n (an int64_t product) to this int k parameter:

at::Tensor DW = torch::empty({m, n}, options);    // line 80: full-size, UNINITIALIZED
// ...
to_cuda((void*)W.data_ptr(), (scalar_t*)DW.data_ptr(), m * n, stream);  // line 85: m*n truncated to int

When m * n > INT_MAX, the truncated k is smaller than the actual tensor size. The kernel processes k elements. The remaining (m * n) - k elements in DW are never written and contain stale GPU memory.

This is a single root cause -- the int type on the k parameter in to_cuda_ggml_t -- with a single fix: change int k to int64_t k. All dequantize functions inherit this type through the same typedef.

Affected Functions

All in csrc/quantization/gguf/gguf_kernel.cu:

Function	Line	Allocation	Info Disclosure?
`ggml_dequantize`	74	`torch::empty({m, n})` at line 80	Yes -- `m*n` truncated to `int k` at line 85
`ggml_mul_mat_vec_a8`	91	`torch::empty({vecs, row})` at line 99	Yes -- `int col = X.sizes()[1]` at line 94
`ggml_mul_mat_a8`	207	`torch::empty({batch, row})` at line 215	Yes -- `int col = X.sizes()[1]` at line 210
`ggml_moe_a8`	279	`torch::empty({tokens*top_k, row})` at line 289	Yes -- `int col = X.sizes()[1]` at line 285

All four functions allocate output tensors with torch::empty (uninitialized) and then run CUDA kernels that use truncated dimension values as loop bounds. The unfilled portion of each output tensor retains stale GPU memory.

ggml_moe_a8_vec (line 382) uses torch::zeros instead of torch::empty, so it is not affected by the info disclosure variant.

Impact: Information Disclosure in Multi-Tenant Serving

vLLM is designed for multi-tenant inference serving. GPU memory is reused across requests from different users. When the dequantize kernel partially fills an output tensor:

The output tensor DW is allocated with torch::empty -- the buffer contains whatever was previously in that GPU memory region
The dequantize kernel fills only a truncated portion of the buffer
The unfilled portion retains residual data from prior GPU operations, which may include tensor data from other users' inference requests
The contaminated tensor proceeds through the model computation
No error or warning is generated -- the partial fill is silent

This is a confidentiality violation. In shared inference deployments (the primary vLLM use case), one user's inference data can leak into another user's model computation through residual GPU memory.

Attacker Control

The attacker crafts a GGUF model file with weight tensor dimensions whose product exceeds INT_MAX (e.g., a matrix with shape [65536, 65536] gives m * n = 4,294,967,296). The model is hosted on HuggingFace or any model hub. The victim loads the model with vLLM for inference serving. The truncation happens automatically during model weight dequantization.

Fix

A fix for this vulnerability was added here: https://github.com/vllm-project/vllm/pull/44971

Severity

5.3 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Impacted products

Name	purl
vllm	pkg:pypi/vllm

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "vllm",
        "purl": "pkg:pypi/vllm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.5.5"
            },
            {
              "last_affected": "0.23.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10.0",
        "0.10.1",
        "0.10.1.1",
        "0.10.2",
        "0.11.0",
        "0.11.1",
        "0.11.2",
        "0.12.0",
        "0.13.0",
        "0.14.0",
        "0.14.1",
        "0.15.0",
        "0.15.1",
        "0.16.0",
        "0.17.0",
        "0.17.1",
        "0.18.0",
        "0.18.1",
        "0.19.0",
        "0.19.1",
        "0.20.0",
        "0.20.1",
        "0.20.2",
        "0.21.0",
        "0.22.0",
        "0.22.1",
        "0.23.0",
        "0.5.5",
        "0.6.0",
        "0.6.1",
        "0.6.1.post1",
        "0.6.1.post2",
        "0.6.2",
        "0.6.3",
        "0.6.3.post1",
        "0.6.4",
        "0.6.4.post1",
        "0.6.5",
        "0.6.6",
        "0.6.6.post1",
        "0.7.0",
        "0.7.1",
        "0.7.2",
        "0.7.3",
        "0.8.0",
        "0.8.1",
        "0.8.2",
        "0.8.3",
        "0.8.4",
        "0.8.5",
        "0.8.5.post1",
        "0.9.0",
        "0.9.0.1",
        "0.9.1",
        "0.9.2"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-53923",
    "GHSA-5jv2-g5wq-cmr4"
  ],
  "details": "## Summary\n\nInteger truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels (`csrc/quantization/gguf/gguf_kernel.cu`) causes partial tensor processing. The output tensor is allocated at full size via `torch::empty` (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users\u0027 inference requests, constituting information disclosure.\n\n## Root Cause\n\nThe `to_cuda_ggml_t` function pointer type at `ggml-common.h:1067` declares its element count parameter as `int` (32-bit):\n\n```cpp\nusing to_cuda_ggml_t = void (*)(const void * __restrict__ x,\n                                dst_t * __restrict__ y,\n                                int k,              // 32-bit\n                                cudaStream_t stream);\n```\n\nAll dequantize kernel functions (`dequantize_block_cuda`, `dequantize_row_q2_K_cuda`, etc. in `dequantize.cuh`) inherit this `int k` parameter and use it as the kernel launch grid size:\n\n```cpp\nstatic void dequantize_block_cuda(..., const int k, cudaStream_t stream) {\n    const int num_blocks = (k + 2*CUDA_DEQUANTIZE_BLOCK_SIZE - 1) / (2*CUDA_DEQUANTIZE_BLOCK_SIZE);\n    dequantize_block\u003c\u003c\u003cnum_blocks, CUDA_DEQUANTIZE_BLOCK_SIZE, 0, stream\u003e\u003e\u003e(vx, y, k);\n}\n```\n\nIn `ggml_dequantize()` at `gguf_kernel.cu:85`, the caller passes `m * n` (an `int64_t` product) to this `int k` parameter:\n\n```cpp\nat::Tensor DW = torch::empty({m, n}, options);    // line 80: full-size, UNINITIALIZED\n// ...\nto_cuda((void*)W.data_ptr(), (scalar_t*)DW.data_ptr(), m * n, stream);  // line 85: m*n truncated to int\n```\n\nWhen `m * n \u003e INT_MAX`, the truncated `k` is smaller than the actual tensor size. The kernel processes `k` elements. The remaining `(m * n) - k` elements in `DW` are never written and contain stale GPU memory.\n\nThis is a single root cause -- the `int` type on the `k` parameter in `to_cuda_ggml_t` -- with a single fix: change `int k` to `int64_t k`. All dequantize functions inherit this type through the same typedef.\n\n## Affected Functions\n\nAll in `csrc/quantization/gguf/gguf_kernel.cu`:\n\n| Function | Line | Allocation | Info Disclosure? |\n|----------|------|-----------|-----------------|\n| `ggml_dequantize` | 74 | `torch::empty({m, n})` at line 80 | Yes -- `m*n` truncated to `int k` at line 85 |\n| `ggml_mul_mat_vec_a8` | 91 | `torch::empty({vecs, row})` at line 99 | Yes -- `int col = X.sizes()[1]` at line 94 |\n| `ggml_mul_mat_a8` | 207 | `torch::empty({batch, row})` at line 215 | Yes -- `int col = X.sizes()[1]` at line 210 |\n| `ggml_moe_a8` | 279 | `torch::empty({tokens*top_k, row})` at line 289 | Yes -- `int col = X.sizes()[1]` at line 285 |\n\nAll four functions allocate output tensors with `torch::empty` (uninitialized) and then run CUDA kernels that use truncated dimension values as loop bounds. The unfilled portion of each output tensor retains stale GPU memory.\n\n`ggml_moe_a8_vec` (line 382) uses `torch::zeros` instead of `torch::empty`, so it is not affected by the info disclosure variant.\n\n## Impact: Information Disclosure in Multi-Tenant Serving\n\nvLLM is designed for multi-tenant inference serving. GPU memory is reused across requests from different users. When the dequantize kernel partially fills an output tensor:\n\n1. The output tensor `DW` is allocated with `torch::empty` -- the buffer contains whatever was previously in that GPU memory region\n2. The dequantize kernel fills only a truncated portion of the buffer\n3. The unfilled portion retains residual data from prior GPU operations, which may include tensor data from other users\u0027 inference requests\n4. The contaminated tensor proceeds through the model computation\n5. No error or warning is generated -- the partial fill is silent\n\nThis is a confidentiality violation. In shared inference deployments (the primary vLLM use case), one user\u0027s inference data can leak into another user\u0027s model computation through residual GPU memory.\n\n## Attacker Control\n\nThe attacker crafts a GGUF model file with weight tensor dimensions whose product exceeds `INT_MAX` (e.g., a matrix with shape `[65536, 65536]` gives `m * n = 4,294,967,296`). The model is hosted on HuggingFace or any model hub. The victim loads the model with vLLM for inference serving. The truncation happens automatically during model weight dequantization.\n\n## Fix\n\nA fix for this vulnerability was added here: https://github.com/vllm-project/vllm/pull/44971",
  "id": "PYSEC-2026-3403",
  "modified": "2026-07-13T16:07:25.870141Z",
  "published": "2026-07-13T15:46:18.643401Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/pull/44971"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/vllm-project/vllm"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/vllm"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-5jv2-g5wq-cmr4"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
    }
  ],
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving"
}

RHSA-2026:59138

Vulnerability from csaf_redhat - Published: 2026-08-24 16:51 - Updated: 2026-09-06 04:18

Summary

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (CUDA)

Severity

Important

Notes

Topic: Red Hat AI Inference Server 3.3.6 (CUDA) is now available.

Details: Red Hat® AI Inference Server

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-41523

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64		—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-47155

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64		—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64		—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users' requests. This constitutes an information disclosure vulnerability.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64		—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64		—	Vendor Fix fix Workaround

Threats

Impact Low

References

29 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:59138	self
https://access.redhat.com/security/cve/CVE-2026-41523	external
https://access.redhat.com/security/cve/CVE-2026-47155	external
https://access.redhat.com/security/cve/CVE-2026-53923	external
https://access.redhat.com/security/updates/classi…	external
https://www.redhat.com/en/products/ai/inference-server	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-41523	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491582	external
https://www.cve.org/CVERecord?id=CVE-2026-41523	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41523	external
https://github.com/vllm-project/vllm/commit/b3c7f…	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/dcb05b04-e625-41e7-adb…	external
https://access.redhat.com/security/cve/CVE-2026-47155	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491580	external
https://www.cve.org/CVERecord?id=CVE-2026-47155	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47155	external
https://github.com/vllm-project/vllm/commit/d26a2…	external
https://github.com/vllm-project/vllm/pull/42616	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a70…	external
https://access.redhat.com/security/cve/CVE-2026-53923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491579	external
https://www.cve.org/CVERecord?id=CVE-2026-53923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53923	external
https://github.com/vllm-project/vllm/commit/f2197…	external
https://github.com/vllm-project/vllm/pull/44971	external
https://github.com/vllm-project/vllm/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.6 (CUDA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:59138",
        "url": "https://access.redhat.com/errata/RHSA-2026:59138"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41523",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47155",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59138.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (CUDA)",
    "tracking": {
      "current_release_date": "2026-09-06T04:18:24+00:00",
      "generator": {
        "date": "2026-09-06T04:18:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:59138",
      "initial_release_date": "2026-08-24T16:51:10+00:00",
      "revision_history": [
        {
          "date": "2026-08-24T16:51:10+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-06T04:18:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-cuda-rhel9@sha256%3A333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9\u0026tag=1787161382"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-cuda-rhel9@sha256%3A201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b?arch=arm64\u0026repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9\u0026tag=1787161382"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41523",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-06-22T23:01:00.799590+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM \u003c 0.14.0) are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3",
          "url": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c",
          "url": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c"
        }
      ],
      "release_date": "2026-06-22T22:18:14.494000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59138",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59138"
        },
        {
          "category": "workaround",
          "details": "Avoid running vLLM with python -O or PYTHONOPTIMIZE=1 until updated packages are available. Only load models from trusted sources. Restrict who can deploy or update models on inference endpoints. Apply network access controls and authentication in front of vLLM APIs.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model"
    },
    {
      "cve": "CVE-2026-47155",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-22T23:00:54.705583+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact. The flaw is a supply-chain integrity issue when operators pin a HuggingFace model revision but vLLM may still load nested artifacts from an unpinned revision. It affects Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI images that ship vLLM versions prior to 0.22.0. KServe control-plane components that bundle vLLM as a library are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6",
          "url": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/42616",
          "url": "https://github.com/vllm-project/vllm/pull/42616"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac",
          "url": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac"
        }
      ],
      "release_date": "2026-06-22T22:20:10.793000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59138",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59138"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a vLLM build containing the fix (\u003e= 0.22.0) when available from Red Hat. Until then, only serve models from trusted registries, pin revisions explicitly, and review nested artifacts in model repositories before deployment.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls"
    },
    {
      "cve": "CVE-2026-53923",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-06-22T23:00:51.742636+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users\u0027 requests. This constitutes an information disclosure vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Information disclosure via integer truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Low impact for Red Hat AI products. The upstream issue is limited information disclosure via integer truncation in vLLM sampling parameters. Red Hat OpenShift AI, Red Hat AI Inference Server, and Red Hat Enterprise Linux AI images are not considered affected because untrusted clients cannot control the vulnerable parameters in supported deployment models.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
          "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44971",
          "url": "https://github.com/vllm-project/vllm/pull/44971"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
        }
      ],
      "release_date": "2026-06-22T21:55:42.001000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59138",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59138"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required for unaffected deployments. Restrict untrusted access to inference APIs as a general hardening measure.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:201b9f3ebdbaa9979d9f40276e3aa5cc78f20d08ed3abae90954caff30ae9d8b_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:333f2a87d0dd8bc399eb7c1d9c7033e2c90c25c1b1b44a9941f16437b33ddccb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "vllm: vLLM: Information disclosure via integer truncation"
    }
  ]
}

RHSA-2026:59139

Vulnerability from csaf_redhat - Published: 2026-08-24 16:51 - Updated: 2026-09-06 04:19

Summary

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (ROCm)

Severity

Important

Notes

Topic: Red Hat AI Inference Server 3.3.6 (ROCm) is now available.

Details: Red Hat® AI Inference Server

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-41523

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-47155

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64		—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users' requests. This constitutes an information disclosure vulnerability.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64		—	Vendor Fix fix Workaround

Threats

Impact Low

References

29 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:59139	self
https://access.redhat.com/security/cve/CVE-2026-41523	external
https://access.redhat.com/security/cve/CVE-2026-47155	external
https://access.redhat.com/security/cve/CVE-2026-53923	external
https://access.redhat.com/security/updates/classi…	external
https://www.redhat.com/en/products/ai/inference-server	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-41523	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491582	external
https://www.cve.org/CVERecord?id=CVE-2026-41523	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41523	external
https://github.com/vllm-project/vllm/commit/b3c7f…	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/dcb05b04-e625-41e7-adb…	external
https://access.redhat.com/security/cve/CVE-2026-47155	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491580	external
https://www.cve.org/CVERecord?id=CVE-2026-47155	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47155	external
https://github.com/vllm-project/vllm/commit/d26a2…	external
https://github.com/vllm-project/vllm/pull/42616	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a70…	external
https://access.redhat.com/security/cve/CVE-2026-53923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491579	external
https://www.cve.org/CVERecord?id=CVE-2026-53923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53923	external
https://github.com/vllm-project/vllm/commit/f2197…	external
https://github.com/vllm-project/vllm/pull/44971	external
https://github.com/vllm-project/vllm/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.6 (ROCm) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:59139",
        "url": "https://access.redhat.com/errata/RHSA-2026:59139"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41523",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47155",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59139.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (ROCm)",
    "tracking": {
      "current_release_date": "2026-09-06T04:19:06+00:00",
      "generator": {
        "date": "2026-09-06T04:19:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:59139",
      "initial_release_date": "2026-08-24T16:51:58+00:00",
      "revision_history": [
        {
          "date": "2026-08-24T16:51:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-06T04:19:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-rocm-rhel9@sha256%3Adbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9\u0026tag=1787161803"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41523",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-06-22T23:01:00.799590+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM \u003c 0.14.0) are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3",
          "url": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c",
          "url": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c"
        }
      ],
      "release_date": "2026-06-22T22:18:14.494000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:58+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59139",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59139"
        },
        {
          "category": "workaround",
          "details": "Avoid running vLLM with python -O or PYTHONOPTIMIZE=1 until updated packages are available. Only load models from trusted sources. Restrict who can deploy or update models on inference endpoints. Apply network access controls and authentication in front of vLLM APIs.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model"
    },
    {
      "cve": "CVE-2026-47155",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-22T23:00:54.705583+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact. The flaw is a supply-chain integrity issue when operators pin a HuggingFace model revision but vLLM may still load nested artifacts from an unpinned revision. It affects Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI images that ship vLLM versions prior to 0.22.0. KServe control-plane components that bundle vLLM as a library are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6",
          "url": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/42616",
          "url": "https://github.com/vllm-project/vllm/pull/42616"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac",
          "url": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac"
        }
      ],
      "release_date": "2026-06-22T22:20:10.793000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:58+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59139",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59139"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a vLLM build containing the fix (\u003e= 0.22.0) when available from Red Hat. Until then, only serve models from trusted registries, pin revisions explicitly, and review nested artifacts in model repositories before deployment.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls"
    },
    {
      "cve": "CVE-2026-53923",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-06-22T23:00:51.742636+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users\u0027 requests. This constitutes an information disclosure vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Information disclosure via integer truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Low impact for Red Hat AI products. The upstream issue is limited information disclosure via integer truncation in vLLM sampling parameters. Red Hat OpenShift AI, Red Hat AI Inference Server, and Red Hat Enterprise Linux AI images are not considered affected because untrusted clients cannot control the vulnerable parameters in supported deployment models.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
          "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44971",
          "url": "https://github.com/vllm-project/vllm/pull/44971"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
        }
      ],
      "release_date": "2026-06-22T21:55:42.001000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-24T16:51:58+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:59139",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59139"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required for unaffected deployments. Restrict untrusted access to inference APIs as a general hardening measure.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:dbce78adf45d71b4348c55a3aa1dd9327ea7ec726cf0e5487246de180ecf8a3e_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "vllm: vLLM: Information disclosure via integer truncation"
    }
  ]
}

RHSA-2026:60363

Vulnerability from csaf_redhat - Published: 2026-08-26 16:25 - Updated: 2026-09-06 04:18

Summary

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (Spyre)

Severity

Important

Notes

Topic: Red Hat AI Inference Server 3.3.6 (Spyre) is now available.

Details: Red Hat® AI Inference Server

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44222

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows unauthenticated attackers to cause a Denial of Service (DoS) by supplying image or video placeholder sequences without matching data, leading to an unhandled error and worker termination. Additionally, text-only prompts containing special tokens can be misinterpreted as control commands, potentially leading to unexpected behavior.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-47155

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users' requests. This constitutes an information disclosure vulnerability.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-54234

A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for Large Language Models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted multi-request speculative decoding workload through public gRPC Generate and Abort endpoints. This malformed workload can cause the rejection sampler to produce an out-of-vocabulary token, which then crashes the engine worker. This leads to a service-wide Denial of Service (DoS) for all clients until the worker is restarted.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-55574

A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for large language models (LLMs). A remote attacker could exploit this vulnerability by providing a specially crafted regular expression to the structured_outputs.regex API parameter. This adversarial regex, containing nested quantifiers, can cause an exponential expansion of the state-space in the grammar compiler, leading to an inference worker hanging indefinitely. This results in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

44 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:60363	self
https://access.redhat.com/security/cve/CVE-2026-44222	external
https://access.redhat.com/security/cve/CVE-2026-47155	external
https://access.redhat.com/security/cve/CVE-2026-53923	external
https://access.redhat.com/security/cve/CVE-2026-54234	external
https://access.redhat.com/security/cve/CVE-2026-55574	external
https://access.redhat.com/security/updates/classi…	external
https://www.redhat.com/en/products/ai/inference-server	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44222	self
https://bugzilla.redhat.com/show_bug.cgi?id=2476840	external
https://www.cve.org/CVERecord?id=CVE-2026-44222	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44222	external
https://github.com/vllm-project/vllm/issues/32656	external
https://github.com/vllm-project/vllm/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-47155	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491580	external
https://www.cve.org/CVERecord?id=CVE-2026-47155	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47155	external
https://github.com/vllm-project/vllm/commit/d26a2…	external
https://github.com/vllm-project/vllm/pull/42616	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a70…	external
https://access.redhat.com/security/cve/CVE-2026-53923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491579	external
https://www.cve.org/CVERecord?id=CVE-2026-53923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53923	external
https://github.com/vllm-project/vllm/commit/f2197…	external
https://github.com/vllm-project/vllm/pull/44971	external
https://github.com/vllm-project/vllm/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-54234	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497515	external
https://www.cve.org/CVERecord?id=CVE-2026-54234	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54234	external
https://github.com/vllm-project/vllm/commit/8a5cf…	external
https://github.com/vllm-project/vllm/pull/44744	external
https://github.com/vllm-project/vllm/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-55574	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497509	external
https://www.cve.org/CVERecord?id=CVE-2026-55574	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55574	external
https://github.com/vllm-project/vllm/commit/2b300…	external
https://github.com/vllm-project/vllm/pull/45118	external
https://github.com/vllm-project/vllm/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.6 (Spyre) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:60363",
        "url": "https://access.redhat.com/errata/RHSA-2026:60363"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44222",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44222"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47155",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54234",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54234"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55574",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55574"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60363.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (Spyre)",
    "tracking": {
      "current_release_date": "2026-09-06T04:18:24+00:00",
      "generator": {
        "date": "2026-09-06T04:18:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:60363",
      "initial_release_date": "2026-08-26T16:25:47+00:00",
      "revision_history": [
        {
          "date": "2026-08-26T16:25:47+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-06T04:18:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3Ae54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1787161776"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be?arch=s390x\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1787161776"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3Af3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1787161776"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44222",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-05-12T21:02:52.278811+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2476840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows unauthenticated attackers to cause a Denial of Service (DoS) by supplying image or video placeholder sequences without matching data, leading to an unhandled error and worker termination. Additionally, text-only prompts containing special tokens can be misinterpreted as control commands, potentially leading to unexpected behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Denial of Service via malformed multimodal input or token injection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability affecting vLLM, as integrated into Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI. The flaw allows unauthenticated attackers to trigger worker termination and degrade service availability by submitting malformed multimodal input or text prompts containing specific token sequences. This impact is significant due to the potential for service disruption in AI inference workloads.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44222"
        },
        {
          "category": "external",
          "summary": "RHBZ#2476840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44222"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/issues/32656",
          "url": "https://github.com/vllm-project/vllm/issues/32656"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-hpv8-x276-m59f",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-hpv8-x276-m59f"
        }
      ],
      "release_date": "2026-05-12T19:57:25.336000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-26T16:25:47+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:60363",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60363"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Denial of Service via malformed multimodal input or token injection"
    },
    {
      "cve": "CVE-2026-47155",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-22T23:00:54.705583+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact. The flaw is a supply-chain integrity issue when operators pin a HuggingFace model revision but vLLM may still load nested artifacts from an unpinned revision. It affects Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI images that ship vLLM versions prior to 0.22.0. KServe control-plane components that bundle vLLM as a library are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6",
          "url": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/42616",
          "url": "https://github.com/vllm-project/vllm/pull/42616"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac",
          "url": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac"
        }
      ],
      "release_date": "2026-06-22T22:20:10.793000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-26T16:25:47+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:60363",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60363"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a vLLM build containing the fix (\u003e= 0.22.0) when available from Red Hat. Until then, only serve models from trusted registries, pin revisions explicitly, and review nested artifacts in model repositories before deployment.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls"
    },
    {
      "cve": "CVE-2026-53923",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-06-22T23:00:51.742636+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users\u0027 requests. This constitutes an information disclosure vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Information disclosure via integer truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Low impact for Red Hat AI products. The upstream issue is limited information disclosure via integer truncation in vLLM sampling parameters. Red Hat OpenShift AI, Red Hat AI Inference Server, and Red Hat Enterprise Linux AI images are not considered affected because untrusted clients cannot control the vulnerable parameters in supported deployment models.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
          "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44971",
          "url": "https://github.com/vllm-project/vllm/pull/44971"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
        }
      ],
      "release_date": "2026-06-22T21:55:42.001000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-26T16:25:47+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:60363",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60363"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required for unaffected deployments. Restrict untrusted access to inference APIs as a general hardening measure.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "vllm: vLLM: Information disclosure via integer truncation"
    },
    {
      "cve": "CVE-2026-54234",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-06T21:01:59.789808+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497515"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for Large Language Models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted multi-request speculative decoding workload through public gRPC Generate and Abort endpoints. This malformed workload can cause the rejection sampler to produce an out-of-vocabulary token, which then crashes the engine worker. This leads to a service-wide Denial of Service (DoS) for all clients until the worker is restarted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Denial of Service via malformed speculative decoding workload",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in vLLM, utilized by Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, allows a remote attacker to crash the engine worker. By sending a specially crafted multi-request speculative decoding workload to public gRPC endpoints, an attacker can trigger an out-of-vocabulary token, leading to a service-wide disruption for all connected clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54234"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497515",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497515"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54234",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54234"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54234",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54234"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/8a5cf1ccd65e8ac7635c402c1ec0b08988bc26ca",
          "url": "https://github.com/vllm-project/vllm/commit/8a5cf1ccd65e8ac7635c402c1ec0b08988bc26ca"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44744",
          "url": "https://github.com/vllm-project/vllm/pull/44744"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f"
        }
      ],
      "release_date": "2026-07-06T19:49:20.481000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-26T16:25:47+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:60363",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60363"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the vLLM inference engine\u0027s gRPC Generate and Abort endpoints. Configure firewall rules to limit incoming connections to trusted clients or internal networks only. This will prevent remote, unauthenticated attackers from sending malformed workloads and triggering a denial of service. If the service is exposed via a proxy or load balancer, ensure that access controls are in place at that layer.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Denial of Service via malformed speculative decoding workload"
    },
    {
      "cve": "CVE-2026-55574",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-07-06T21:01:40.112117+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for large language models (LLMs). A remote attacker could exploit this vulnerability by providing a specially crafted regular expression to the structured_outputs.regex API parameter. This adversarial regex, containing nested quantifiers, can cause an exponential expansion of the state-space in the grammar compiler, leading to an inference worker hanging indefinitely. This results in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Denial of Service via adversarial regular expression in structured outputs API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service vulnerability exists in vLLM, as utilized within Red Hat AI Inference Server and Red Hat OpenShift AI. This flaw allows a remote, unauthenticated attacker to cause an inference worker to hang indefinitely by submitting a specially crafted regular expression to the structured outputs API. The absence of complexity analysis for nested quantifiers in the regex compiler leads to an exponential state-space expansion, resulting in prolonged service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55574"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55574",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55574"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55574",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55574"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/2b3006076c5e9bc4cda9e03e3641388de3c5c286",
          "url": "https://github.com/vllm-project/vllm/commit/2b3006076c5e9bc4cda9e03e3641388de3c5c286"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/45118",
          "url": "https://github.com/vllm-project/vllm/pull/45118"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-rwxx-mrjm-wc2m",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-rwxx-mrjm-wc2m"
        }
      ],
      "release_date": "2026-07-06T20:05:31.003000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-26T16:25:47+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:60363",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60363"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:590f1bb37f9c9abb51a6ff7f557b45f1dcfba2e4880de979290703c2e6de95be_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:e54618292d1e6f1c9c959a42160bad3a153ca7e050665739d3ddd9dbfda541f8_ppc64le",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f3dfb688e524f44f071f20954e454a91013a9c48f8cc59a32f7f402bb61d8ed0_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Denial of Service via adversarial regular expression in structured outputs API"
    }
  ]
}

RHSA-2026:62335

Vulnerability from csaf_redhat - Published: 2026-09-01 21:52 - Updated: 2026-09-11 13:56

Summary

Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.6 enhancement update

Severity

Important

Notes

Topic: Updated Red Hat Enterprise Linux AI 3.3.6 container disk images are now available.

Details: Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models (LLMs) for enterprise applications. This update provides the latest Red Hat Enterprise Linux AI 3.3.6 container disk images for use with OpenShift Virtualization. For a full list of changes in this release, see the Red Hat Enterprise Linux AI Release Notes linked in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-34993

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-41523

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-42338

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-47155

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users' requests. This constitutes an information disclosure vulnerability.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-54058

A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix

Threats

Impact Important

CVE-2026-54060

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix

Threats

Impact Important

CVE-2026-55379

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-55380

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59199

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library's image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59200

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59204

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59205

A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform's declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59884

A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59885

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-59886

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64		—	Vendor Fix fix Workaround

Threats

Impact Important

References

127 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:62335	self
https://access.redhat.com/security/cve/CVE-2026-34993	external
https://access.redhat.com/security/cve/CVE-2026-41523	external
https://access.redhat.com/security/cve/CVE-2026-42338	external
https://access.redhat.com/security/cve/CVE-2026-47155	external
https://access.redhat.com/security/cve/CVE-2026-53923	external
https://access.redhat.com/security/cve/CVE-2026-54058	external
https://access.redhat.com/security/cve/CVE-2026-54060	external
https://access.redhat.com/security/cve/CVE-2026-55379	external
https://access.redhat.com/security/cve/CVE-2026-55380	external
https://access.redhat.com/security/cve/CVE-2026-59199	external
https://access.redhat.com/security/cve/CVE-2026-59200	external
https://access.redhat.com/security/cve/CVE-2026-59204	external
https://access.redhat.com/security/cve/CVE-2026-59205	external
https://access.redhat.com/security/cve/CVE-2026-59884	external
https://access.redhat.com/security/cve/CVE-2026-59885	external
https://access.redhat.com/security/cve/CVE-2026-59886	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://www.redhat.com/en/technologies/linux-plat…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-34993	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484099	external
https://www.cve.org/CVERecord?id=CVE-2026-34993	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34993	external
https://github.com/aio-libs/aiohttp/commit/dcf40f…	external
https://github.com/aio-libs/aiohttp/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-41523	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491582	external
https://www.cve.org/CVERecord?id=CVE-2026-41523	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41523	external
https://github.com/vllm-project/vllm/commit/b3c7f…	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/dcb05b04-e625-41e7-adb…	external
https://access.redhat.com/security/cve/CVE-2026-42338	self
https://bugzilla.redhat.com/show_bug.cgi?id=2476810	external
https://www.cve.org/CVERecord?id=CVE-2026-42338	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42338	external
https://github.com/beaugunderson/ip-address/secur…	external
https://access.redhat.com/security/cve/CVE-2026-47155	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491580	external
https://www.cve.org/CVERecord?id=CVE-2026-47155	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47155	external
https://github.com/vllm-project/vllm/commit/d26a2…	external
https://github.com/vllm-project/vllm/pull/42616	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a70…	external
https://access.redhat.com/security/cve/CVE-2026-53923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491579	external
https://www.cve.org/CVERecord?id=CVE-2026-53923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53923	external
https://github.com/vllm-project/vllm/commit/f2197…	external
https://github.com/vllm-project/vllm/pull/44971	external
https://github.com/vllm-project/vllm/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-54058	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500057	external
https://www.cve.org/CVERecord?id=CVE-2026-54058	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54058	external
https://github.com/python-pillow/Pillow/commit/6a…	external
https://github.com/python-pillow/Pillow/pull/9719	external
https://github.com/python-pillow/Pillow/releases/…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-54060	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497466	external
https://www.cve.org/CVERecord?id=CVE-2026-54060	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54060	external
https://github.com/python-pillow/Pillow/blob/main…	external
https://github.com/python-pillow/Pillow/commit/0a…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-55379	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497452	external
https://www.cve.org/CVERecord?id=CVE-2026-55379	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55379	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-55380	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497455	external
https://www.cve.org/CVERecord?id=CVE-2026-55380	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55380	external
https://github.com/python-pillow/Pillow/commit/f3…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59199	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500061	external
https://www.cve.org/CVERecord?id=CVE-2026-59199	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59199	external
https://github.com/python-pillow/Pillow/commit/ce…	external
https://github.com/python-pillow/Pillow/pull/9703	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59200	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500060	external
https://www.cve.org/CVERecord?id=CVE-2026-59200	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59200	external
https://github.com/python-pillow/Pillow/commit/f7…	external
https://github.com/python-pillow/Pillow/pull/9718	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59204	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500022	external
https://www.cve.org/CVERecord?id=CVE-2026-59204	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59204	external
https://github.com/python-pillow/Pillow/commit/13…	external
https://github.com/python-pillow/Pillow/pull/9704	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59205	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500052	external
https://www.cve.org/CVERecord?id=CVE-2026-59205	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59205	external
https://github.com/python-pillow/Pillow/commit/a9…	external
https://github.com/python-pillow/Pillow/pull/9715	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500204	external
https://www.cve.org/CVERecord?id=CVE-2026-59884	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59884	external
https://github.com/pyasn1/pyasn1/commit/628e36ecb…	external
https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-59885	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500380	external
https://www.cve.org/CVERecord?id=CVE-2026-59885	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59885	external
https://github.com/pyasn1/pyasn1/commit/45bdb19eb…	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-59886	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500041	external
https://www.cve.org/CVERecord?id=CVE-2026-59886	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59886	external
https://github.com/pyasn1/pyasn1/commit/e60c691cb…	external
https://github.com/pyasn1/pyasn1/security/advisor…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Red Hat Enterprise Linux AI 3.3.6 container disk images are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae Enterprise Linux\u00ae AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models (LLMs) for enterprise applications.\n\nThis update provides the latest Red Hat Enterprise Linux AI 3.3.6 container disk images for use with OpenShift Virtualization.\n\nFor a full list of changes in this release, see the Red Hat Enterprise Linux AI Release Notes linked in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:62335",
        "url": "https://access.redhat.com/errata/RHSA-2026:62335"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34993",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34993"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41523",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42338"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47155",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54058",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54060",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55379",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55380",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59199",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59200",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59204",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59205",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59884",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59884"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3/html/release_notes/rhelai-33-stable-release-notes_release-notes",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3/html/release_notes/rhelai-33-stable-release-notes_release-notes"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai",
        "url": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62335.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.6 enhancement update",
    "tracking": {
      "current_release_date": "2026-09-11T13:56:46+00:00",
      "generator": {
        "date": "2026-09-11T13:56:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2026:62335",
      "initial_release_date": "2026-09-01T21:52:57+00:00",
      "revision_history": [
        {
          "date": "2026-09-01T21:52:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-11T13:56:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AI 3.3",
                "product": {
                  "name": "Red Hat Enterprise Linux AI 3.3",
                  "product_id": "Red Hat Enterprise Linux AI 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux AI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64",
                  "product_id": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/disk-image-cuda-rhel9@sha256%3Ac89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/disk-image-cuda-rhel9\u0026tag=1788290314"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34993",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-06-02T20:01:12.690409+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
          "url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
        }
      ],
      "release_date": "2026-06-02T18:29:15.847000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
    },
    {
      "cve": "CVE-2026-41523",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-06-22T23:01:00.799590+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM \u003c 0.14.0) are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3",
          "url": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c",
          "url": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c"
        }
      ],
      "release_date": "2026-06-22T22:18:14.494000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Avoid running vLLM with python -O or PYTHONOPTIMIZE=1 until updated packages are available. Only load models from trusted sources. Restrict who can deploy or update models on inference endpoints. Apply network access controls and authentication in front of vLLM APIs.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model"
    },
    {
      "cve": "CVE-2026-42338",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-12T21:01:14.436876+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2476810"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "RHBZ#2476810",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
          "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
        }
      ],
      "release_date": "2026-05-12T19:43:16.470000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
    },
    {
      "cve": "CVE-2026-47155",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-22T23:00:54.705583+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact. The flaw is a supply-chain integrity issue when operators pin a HuggingFace model revision but vLLM may still load nested artifacts from an unpinned revision. It affects Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI images that ship vLLM versions prior to 0.22.0. KServe control-plane components that bundle vLLM as a library are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6",
          "url": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/42616",
          "url": "https://github.com/vllm-project/vllm/pull/42616"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac",
          "url": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac"
        }
      ],
      "release_date": "2026-06-22T22:20:10.793000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a vLLM build containing the fix (\u003e= 0.22.0) when available from Red Hat. Until then, only serve models from trusted registries, pin revisions explicitly, and review nested artifacts in model repositories before deployment.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls"
    },
    {
      "cve": "CVE-2026-53923",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-06-22T23:00:51.742636+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users\u0027 requests. This constitutes an information disclosure vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Information disclosure via integer truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Low impact for Red Hat AI products. The upstream issue is limited information disclosure via integer truncation in vLLM sampling parameters. Red Hat OpenShift AI, Red Hat AI Inference Server, and Red Hat Enterprise Linux AI images are not considered affected because untrusted clients cannot control the vulnerable parameters in supported deployment models.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
          "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44971",
          "url": "https://github.com/vllm-project/vllm/pull/44971"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
        }
      ],
      "release_date": "2026-06-22T21:55:42.001000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required for unaffected deployments. Restrict untrusted access to inference APIs as a general hardening measure.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "vllm: vLLM: Information disclosure via integer truncation"
    },
    {
      "cve": "CVE-2026-54058",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-14T17:02:34.864708+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500057"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Pillow is vulnerable to an out-of-bounds read when processing a crafted uncompressed McIdas AREA image via the mmap raw codec. A remote attacker who can supply such an image to a service that loads it without user interaction may disclose adjacent process memory or trigger a denial of service. Fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500057",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500057"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",
          "url": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9719",
          "url": "https://github.com/python-pillow/Pillow/pull/9719"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93"
        }
      ],
      "release_date": "2026-07-14T16:27:38.050000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image"
    },
    {
      "cve": "CVE-2026-54060",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-06T20:02:29.509113+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497466"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library\u0027s font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497466",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54060",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"
        }
      ],
      "release_date": "2026-07-06T18:49:23.788000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
    },
    {
      "cve": "CVE-2026-55379",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-06T20:01:29.922515+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497452"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library\u0027s image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted BDF font file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Pillow Python imaging library. The BDF font file parser passes attacker-controlled dimensions to Image.new() without decompression bomb validation, allowing excessive memory allocation and denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497452",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"
        }
      ],
      "release_date": "2026-07-06T18:52:11.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Do not load BDF font files from untrusted sources. Applications that only process standard image formats (PNG, JPEG, etc.) and do not use BdfFontFile or ImageFont.load() with BDF files are not affected.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
    },
    {
      "cve": "CVE-2026-55380",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-07-06T20:01:42.245051+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A denial-of-service vulnerability was found in Pillow\u0027s GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check. A crafted .gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. This issue is fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",
          "url": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"
        }
      ],
      "release_date": "2026-07-06T18:50:14.789000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
    },
    {
      "cve": "CVE-2026-59199",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-14T17:02:51.371888+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500061"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library\u0027s image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is a heap out-of-bounds write, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500061",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500061"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",
          "url": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9703",
          "url": "https://github.com/python-pillow/Pillow/pull/9703"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4"
        }
      ],
      "release_date": "2026-07-14T15:42:15.071000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing"
    },
    {
      "cve": "CVE-2026-59200",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-14T17:02:45.929986+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500060"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of service via crafted PDF stream",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via memory exhaustion. A small crafted PDF input can force unbounded decompression, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500060",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500060"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09",
          "url": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9718",
          "url": "https://github.com/python-pillow/Pillow/pull/9718"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565"
        }
      ],
      "release_date": "2026-07-14T16:09:05.091000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of service via crafted PDF stream"
    },
    {
      "cve": "CVE-2026-59204",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-07-14T16:02:11.802781+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500022"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via excessive memory allocation. A crafted JPEG2000 file can trigger out-of-memory failures, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500022",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500022"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca",
          "url": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9704",
          "url": "https://github.com/python-pillow/Pillow/pull/9704"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"
        }
      ],
      "release_date": "2026-07-14T15:38:29.545000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "If the application does not need JPEG2000 support, block .jp2, .j2k, .jpf, and .jpx uploads at the input layer.\n\nFor services that do process JPEG2000, set memory limits on the process or container (LimitAS= in systemd, or memory limits in Kubernetes/Podman) so a crafted image can only crash the worker, not the whole host. Add automatic restarts (Restart=always in systemd, or container restart policies) so the service recovers from OOM kills without someone having to intervene.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image"
    },
    {
      "cve": "CVE-2026-59205",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2026-07-14T17:02:11.367224+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500052"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform\u0027s declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is heap corruption via mode mismatch, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500052",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500052"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59205",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",
          "url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9715",
          "url": "https://github.com/python-pillow/Pillow/pull/9715"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"
        }
      ],
      "release_date": "2026-07-14T15:48:39.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Most applications using Pillow\u0027s color management via profileToProfile() or applyTransform() are not exposed. Only code that calls ImageCmsTransform.apply() directly with a user-controlled output image whose mode does not match the transform can trigger the heap corruption. Audit your code for direct apply() calls to confirm.\n\nRHEL builds ship with ASLR, full RELRO/PIE, and FORTIFY_SOURCE by default, making escalation from crash to code execution much harder. For DoS containment, configure automatic service restart (Restart=always in systemd, or container restart policies) so the process recovers without manual intervention.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API"
    },
    {
      "cve": "CVE-2026-59884",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T18:07:49.497763+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pyasn1: pyasn1: Denial of Service via crafted BER input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1\u0027s BER decoder. The decoder parses long-form tags by accumulating continuation octets without an upper bound, allowing crafted input to force construction of an arbitrarily large integer with quadratic CPU cost. On Python 3.11+, this can also trigger unhandled ValueError exceptions. Exploitation requires that an application passes untrusted BER, CER, or DER input directly to the pyasn1 decoder \u2014 pyasn1 is a library and does not independently accept network input. Many common uses of pyasn1 involve parsing trusted certificates or local configuration and are not exposed to this flaw. The realistic impact is a denial-of-service of the consuming Python process, with automatic recovery in typical service deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59884",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5",
          "url": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"
        }
      ],
      "release_date": "2026-07-14T16:41:10.277000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python-pyasn1: pyasn1: Denial of Service via crafted BER input"
    },
    {
      "cve": "CVE-2026-59885",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-14T18:17:12.157807+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500380"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500380",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
          "url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
        }
      ],
      "release_date": "2026-07-14T16:40:00.515000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
    },
    {
      "cve": "CVE-2026-59886",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T17:01:19.689422+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500041"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500041",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
          "url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
        }
      ],
      "release_date": "2026-07-14T16:38:29.691000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:52:57+00:00",
          "details": "The container disk images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command, for use with OpenShift Virtualization.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62335"
        },
        {
          "category": "workaround",
          "details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c89a11f9d1f3ec913be22a418b9d7667f6cda2aa7dd0556c796c90c1fc785096_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
    }
  ]
}

RHSA-2026:62336

Vulnerability from csaf_redhat - Published: 2026-09-01 21:55 - Updated: 2026-09-11 13:56

Summary

Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.6 enhancement update

Severity

Important

Notes

Topic: Updated Red Hat Enterprise Linux AI 3.3.6 container images are now available.

Details: Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models (LLMs) for enterprise applications. This update provides the latest Red Hat Enterprise Linux AI 3.3.6 container images. For a full list of changes in this release, see the Red Hat Enterprise Linux AI Release Notes linked in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-34993

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-41523

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-42338

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-47155

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users' requests. This constitutes an information disclosure vulnerability.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-54058

A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—

Threats

Impact Important

CVE-2026-54060

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—

Threats

Impact Important

CVE-2026-55379

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-55380

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59199

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library's image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59200

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59204

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59205

A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform's declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59884

A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Moderate

CVE-2026-59885

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

CVE-2026-59886

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64	—	Vendor Fix fix Workaround

Known not affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64		—	Workaround
Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64		—	Workaround

Threats

Impact Important

References

127 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:62336	self
https://access.redhat.com/security/cve/CVE-2026-34993	external
https://access.redhat.com/security/cve/CVE-2026-41523	external
https://access.redhat.com/security/cve/CVE-2026-42338	external
https://access.redhat.com/security/cve/CVE-2026-47155	external
https://access.redhat.com/security/cve/CVE-2026-53923	external
https://access.redhat.com/security/cve/CVE-2026-54058	external
https://access.redhat.com/security/cve/CVE-2026-54060	external
https://access.redhat.com/security/cve/CVE-2026-55379	external
https://access.redhat.com/security/cve/CVE-2026-55380	external
https://access.redhat.com/security/cve/CVE-2026-59199	external
https://access.redhat.com/security/cve/CVE-2026-59200	external
https://access.redhat.com/security/cve/CVE-2026-59204	external
https://access.redhat.com/security/cve/CVE-2026-59205	external
https://access.redhat.com/security/cve/CVE-2026-59884	external
https://access.redhat.com/security/cve/CVE-2026-59885	external
https://access.redhat.com/security/cve/CVE-2026-59886	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://www.redhat.com/en/technologies/linux-plat…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-34993	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484099	external
https://www.cve.org/CVERecord?id=CVE-2026-34993	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34993	external
https://github.com/aio-libs/aiohttp/commit/dcf40f…	external
https://github.com/aio-libs/aiohttp/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-41523	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491582	external
https://www.cve.org/CVERecord?id=CVE-2026-41523	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41523	external
https://github.com/vllm-project/vllm/commit/b3c7f…	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/dcb05b04-e625-41e7-adb…	external
https://access.redhat.com/security/cve/CVE-2026-42338	self
https://bugzilla.redhat.com/show_bug.cgi?id=2476810	external
https://www.cve.org/CVERecord?id=CVE-2026-42338	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42338	external
https://github.com/beaugunderson/ip-address/secur…	external
https://access.redhat.com/security/cve/CVE-2026-47155	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491580	external
https://www.cve.org/CVERecord?id=CVE-2026-47155	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47155	external
https://github.com/vllm-project/vllm/commit/d26a2…	external
https://github.com/vllm-project/vllm/pull/42616	external
https://github.com/vllm-project/vllm/security/adv…	external
https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a70…	external
https://access.redhat.com/security/cve/CVE-2026-53923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491579	external
https://www.cve.org/CVERecord?id=CVE-2026-53923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53923	external
https://github.com/vllm-project/vllm/commit/f2197…	external
https://github.com/vllm-project/vllm/pull/44971	external
https://github.com/vllm-project/vllm/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-54058	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500057	external
https://www.cve.org/CVERecord?id=CVE-2026-54058	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54058	external
https://github.com/python-pillow/Pillow/commit/6a…	external
https://github.com/python-pillow/Pillow/pull/9719	external
https://github.com/python-pillow/Pillow/releases/…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-54060	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497466	external
https://www.cve.org/CVERecord?id=CVE-2026-54060	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54060	external
https://github.com/python-pillow/Pillow/blob/main…	external
https://github.com/python-pillow/Pillow/commit/0a…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-55379	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497452	external
https://www.cve.org/CVERecord?id=CVE-2026-55379	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55379	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-55380	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497455	external
https://www.cve.org/CVERecord?id=CVE-2026-55380	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55380	external
https://github.com/python-pillow/Pillow/commit/f3…	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59199	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500061	external
https://www.cve.org/CVERecord?id=CVE-2026-59199	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59199	external
https://github.com/python-pillow/Pillow/commit/ce…	external
https://github.com/python-pillow/Pillow/pull/9703	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59200	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500060	external
https://www.cve.org/CVERecord?id=CVE-2026-59200	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59200	external
https://github.com/python-pillow/Pillow/commit/f7…	external
https://github.com/python-pillow/Pillow/pull/9718	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59204	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500022	external
https://www.cve.org/CVERecord?id=CVE-2026-59204	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59204	external
https://github.com/python-pillow/Pillow/commit/13…	external
https://github.com/python-pillow/Pillow/pull/9704	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59205	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500052	external
https://www.cve.org/CVERecord?id=CVE-2026-59205	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59205	external
https://github.com/python-pillow/Pillow/commit/a9…	external
https://github.com/python-pillow/Pillow/pull/9715	external
https://github.com/python-pillow/Pillow/security/…	external
https://access.redhat.com/security/cve/CVE-2026-59884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500204	external
https://www.cve.org/CVERecord?id=CVE-2026-59884	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59884	external
https://github.com/pyasn1/pyasn1/commit/628e36ecb…	external
https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-59885	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500380	external
https://www.cve.org/CVERecord?id=CVE-2026-59885	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59885	external
https://github.com/pyasn1/pyasn1/commit/45bdb19eb…	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-59886	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500041	external
https://www.cve.org/CVERecord?id=CVE-2026-59886	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59886	external
https://github.com/pyasn1/pyasn1/commit/e60c691cb…	external
https://github.com/pyasn1/pyasn1/security/advisor…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Red Hat Enterprise Linux AI 3.3.6 container images are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae Enterprise Linux\u00ae AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models (LLMs) for enterprise applications.\n\nThis update provides the latest Red Hat Enterprise Linux AI 3.3.6 container images.\n\nFor a full list of changes in this release, see the Red Hat Enterprise Linux AI Release Notes linked in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:62336",
        "url": "https://access.redhat.com/errata/RHSA-2026:62336"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34993",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34993"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41523",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42338"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47155",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54058",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54060",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55379",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55380",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59199",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59200",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59204",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59205",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59884",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59884"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3/html/release_notes/rhelai-33-stable-release-notes_release-notes",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3/html/release_notes/rhelai-33-stable-release-notes_release-notes"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai",
        "url": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62336.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.6 enhancement update",
    "tracking": {
      "current_release_date": "2026-09-11T13:56:47+00:00",
      "generator": {
        "date": "2026-09-11T13:56:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2026:62336",
      "initial_release_date": "2026-09-01T21:55:16+00:00",
      "revision_history": [
        {
          "date": "2026-09-01T21:55:16+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-11T13:56:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AI 3.3",
                "product": {
                  "name": "Red Hat Enterprise Linux AI 3.3",
                  "product_id": "Red Hat Enterprise Linux AI 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux AI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-cuda-rhel9@sha256%3A6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9\u0026tag=1788260684"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-aws-cuda-rhel9@sha256%3Adb445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9\u0026tag=1788273908"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-azure-cuda-rhel9@sha256%3A82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9\u0026tag=1788273909"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-gcp-cuda-rhel9@sha256%3A7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9\u0026tag=1788273977"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-rocm-rhel9@sha256%3Ababa8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9\u0026tag=1788260620"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-azure-rocm-rhel9@sha256%3Ae78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9\u0026tag=1788273908"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
                "product": {
                  "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
                  "product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-cuda-rhel9@sha256%3A5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849?arch=arm64\u0026repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9\u0026tag=1788260684"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
          "product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        },
        "product_reference": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64",
        "relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34993",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-06-02T20:01:12.690409+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
          "url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
        },
        {
          "category": "external",
          "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
          "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
        }
      ],
      "release_date": "2026-06-02T18:29:15.847000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
    },
    {
      "cve": "CVE-2026-41523",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-06-22T23:01:00.799590+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM \u003c 0.14.0) are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3",
          "url": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c",
          "url": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c"
        }
      ],
      "release_date": "2026-06-22T22:18:14.494000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Avoid running vLLM with python -O or PYTHONOPTIMIZE=1 until updated packages are available. Only load models from trusted sources. Restrict who can deploy or update models on inference endpoints. Apply network access controls and authentication in front of vLLM APIs.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model"
    },
    {
      "cve": "CVE-2026-42338",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-12T21:01:14.436876+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2476810"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "RHBZ#2476810",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
          "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
        }
      ],
      "release_date": "2026-05-12T19:43:16.470000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
    },
    {
      "cve": "CVE-2026-47155",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-22T23:00:54.705583+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The revision pinning controls in vLLM do not consistently apply to all artifacts loaded for a model. This allows a deployment configured with specific revisions to still load dynamic code or other configuration files from an unpinned or default revision. This issue can lead to a supply-chain integrity compromise, where operators may unknowingly serve models with unreviewed or unintended behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Moderate impact. The flaw is a supply-chain integrity issue when operators pin a HuggingFace model revision but vLLM may still load nested artifacts from an unpinned revision. It affects Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI images that ship vLLM versions prior to 0.22.0. KServe control-plane components that bundle vLLM as a library are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47155"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6",
          "url": "https://github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/42616",
          "url": "https://github.com/vllm-project/vllm/pull/42616"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac",
          "url": "https://huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879ac"
        }
      ],
      "release_date": "2026-06-22T22:20:10.793000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a vLLM build containing the fix (\u003e= 0.22.0) when available from Red Hat. Until then, only serve models from trusted registries, pin revisions explicitly, and review nested artifacts in model repositories before deployment.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Supply-chain integrity issue due to inconsistent revision pinning controls"
    },
    {
      "cve": "CVE-2026-53923",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-06-22T23:00:51.742636+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM\u0027s GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other users\u0027 requests. This constitutes an information disclosure vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Information disclosure via integer truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as having Low impact for Red Hat AI products. The upstream issue is limited information disclosure via integer truncation in vLLM sampling parameters. Red Hat OpenShift AI, Red Hat AI Inference Server, and Red Hat Enterprise Linux AI images are not considered affected because untrusted clients cannot control the vulnerable parameters in supported deployment models.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53923"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e",
          "url": "https://github.com/vllm-project/vllm/commit/f219788f91952827132fa4fdf916427cd20d225e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/44971",
          "url": "https://github.com/vllm-project/vllm/pull/44971"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-5jv2-g5wq-cmr4"
        }
      ],
      "release_date": "2026-06-22T21:55:42.001000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required for unaffected deployments. Restrict untrusted access to inference APIs as a general hardening measure.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "vllm: vLLM: Information disclosure via integer truncation"
    },
    {
      "cve": "CVE-2026-54058",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-14T17:02:34.864708+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500057"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Pillow is vulnerable to an out-of-bounds read when processing a crafted uncompressed McIdas AREA image via the mmap raw codec. A remote attacker who can supply such an image to a service that loads it without user interaction may disclose adjacent process memory or trigger a denial of service. Fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500057",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500057"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",
          "url": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9719",
          "url": "https://github.com/python-pillow/Pillow/pull/9719"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93"
        }
      ],
      "release_date": "2026-07-14T16:27:38.050000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image"
    },
    {
      "cve": "CVE-2026-54060",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-06T20:02:29.509113+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497466"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library\u0027s font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497466",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54060",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"
        }
      ],
      "release_date": "2026-07-06T18:49:23.788000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
    },
    {
      "cve": "CVE-2026-55379",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-06T20:01:29.922515+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497452"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library\u0027s image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted BDF font file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Pillow Python imaging library. The BDF font file parser passes attacker-controlled dimensions to Image.new() without decompression bomb validation, allowing excessive memory allocation and denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497452",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"
        }
      ],
      "release_date": "2026-07-06T18:52:11.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Do not load BDF font files from untrusted sources. Applications that only process standard image formats (PNG, JPEG, etc.) and do not use BdfFontFile or ImageFont.load() with BDF files are not affected.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
    },
    {
      "cve": "CVE-2026-55380",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-07-06T20:01:42.245051+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A denial-of-service vulnerability was found in Pillow\u0027s GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check. A crafted .gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. This issue is fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",
          "url": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"
        }
      ],
      "release_date": "2026-07-06T18:50:14.789000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
    },
    {
      "cve": "CVE-2026-59199",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-14T17:02:51.371888+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500061"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library\u0027s image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is a heap out-of-bounds write, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500061",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500061"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",
          "url": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9703",
          "url": "https://github.com/python-pillow/Pillow/pull/9703"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4"
        }
      ],
      "release_date": "2026-07-14T15:42:15.071000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing"
    },
    {
      "cve": "CVE-2026-59200",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-14T17:02:45.929986+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500060"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of service via crafted PDF stream",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via memory exhaustion. A small crafted PDF input can force unbounded decompression, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500060",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500060"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09",
          "url": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9718",
          "url": "https://github.com/python-pillow/Pillow/pull/9718"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565"
        }
      ],
      "release_date": "2026-07-14T16:09:05.091000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of service via crafted PDF stream"
    },
    {
      "cve": "CVE-2026-59204",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-07-14T16:02:11.802781+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500022"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via excessive memory allocation. A crafted JPEG2000 file can trigger out-of-memory failures, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500022",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500022"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca",
          "url": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9704",
          "url": "https://github.com/python-pillow/Pillow/pull/9704"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"
        }
      ],
      "release_date": "2026-07-14T15:38:29.545000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "If the application does not need JPEG2000 support, block .jp2, .j2k, .jpf, and .jpx uploads at the input layer.\n\nFor services that do process JPEG2000, set memory limits on the process or container (LimitAS= in systemd, or memory limits in Kubernetes/Podman) so a crafted image can only crash the worker, not the whole host. Add automatic restarts (Restart=always in systemd, or container restart policies) so the service recovers from OOM kills without someone having to intervene.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image"
    },
    {
      "cve": "CVE-2026-59205",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2026-07-14T17:02:11.367224+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500052"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform\u0027s declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is heap corruption via mode mismatch, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500052",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500052"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59205",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",
          "url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9715",
          "url": "https://github.com/python-pillow/Pillow/pull/9715"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"
        }
      ],
      "release_date": "2026-07-14T15:48:39.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Most applications using Pillow\u0027s color management via profileToProfile() or applyTransform() are not exposed. Only code that calls ImageCmsTransform.apply() directly with a user-controlled output image whose mode does not match the transform can trigger the heap corruption. Audit your code for direct apply() calls to confirm.\n\nRHEL builds ship with ASLR, full RELRO/PIE, and FORTIFY_SOURCE by default, making escalation from crash to code execution much harder. For DoS containment, configure automatic service restart (Restart=always in systemd, or container restart policies) so the process recovers without manual intervention.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API"
    },
    {
      "cve": "CVE-2026-59884",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T18:07:49.497763+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pyasn1: pyasn1: Denial of Service via crafted BER input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1\u0027s BER decoder. The decoder parses long-form tags by accumulating continuation octets without an upper bound, allowing crafted input to force construction of an arbitrarily large integer with quadratic CPU cost. On Python 3.11+, this can also trigger unhandled ValueError exceptions. Exploitation requires that an application passes untrusted BER, CER, or DER input directly to the pyasn1 decoder \u2014 pyasn1 is a library and does not independently accept network input. Many common uses of pyasn1 involve parsing trusted certificates or local configuration and are not exposed to this flaw. The realistic impact is a denial-of-service of the consuming Python process, with automatic recovery in typical service deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59884",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5",
          "url": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"
        }
      ],
      "release_date": "2026-07-14T16:41:10.277000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python-pyasn1: pyasn1: Denial of Service via crafted BER input"
    },
    {
      "cve": "CVE-2026-59885",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-14T18:17:12.157807+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500380"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500380",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
          "url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
        }
      ],
      "release_date": "2026-07-14T16:40:00.515000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
    },
    {
      "cve": "CVE-2026-59886",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T17:01:19.689422+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500041"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
          "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500041",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
          "url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
        }
      ],
      "release_date": "2026-07-14T16:38:29.691000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T21:55:16+00:00",
          "details": "The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62336"
        },
        {
          "category": "workaround",
          "details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
          "product_ids": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:db445687f68381ba4348925b32b7782fb3424eefd0a6e58e200a9ad69685551a_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:82f19ded4eab2cd19f81187b2318897daa180a0edf04eaed9b45c3d9d27b2fe5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:6689af3952e683d9a963a884b3b35979483560e6610fea0ccdda20d14ca51dee_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64",
            "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:baba8ef26e81ee1cb529c894b5f0587588537de87d3a29267fc243812c29fa5a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
    }
  ]
}

CVE-2026-53923 (GCVE-0-2026-53923)

Tags

Sightings

Nomenclature

Action not permitted

CVE-2026-53923 (GCVE-0-2026-53923)

Summary

Root Cause

Affected Functions

Impact: Information Disclosure in Multi-Tenant Serving

Attacker Control

Fix

Summary

Root Cause

Affected Functions

Impact: Information Disclosure in Multi-Tenant Serving

Attacker Control

Fix

Tags

Sightings

Nomenclature