CVE-2026-114050

vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving...

CVE-2026-114050

Versions of vLLM before 0.31.0 are vulnerable to a remote engine crash due to insufficient verification of data authenticity (CWE-345 ). The software uses a client-supplied multimodal uuid as a cache identity without performing any consistency checks on cache hits. This allows unauthenticated att...

CVE-2026-114050 vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID

vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving...

PT-2026-120176

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.31.0 Description The software uses a client-supplied multimodal uuid verbatim as a cache identity without performing consistency checks on cache hits. This allows unauthenticated attackers to desynchronize the P0/P1...

PT-2026-120626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the content of a Periodic Advertisement Report is copied to BASE without properly verifying if the service UUID matches the Basi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.178 and prior to 6.6.145. This vulnerability stems from the Bluetooth ISO failing to verify whether a service UUID is the Basic Audio Announcement Service UUID; as a result, Periodic Advertisement Report data may be incorrectly...

OpenStack Cinder permission and access control issues

OpenStack Cinder versions 29.0.0 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities stem from information leakage across projects due to the Messages API. When non-administrator users with project-wide member or reader roles call the Block...

vLLM input validation vulnerability

Versions of vLLM prior to 0.31.0 have a vulnerability related to input validation errors. This vulnerability stems from using the multi-modal UUID provided by the client as a cache identifier without proper consistency checks when the cache is hit. This allows unauthenticated attackers to cause t...

CLSA-2026-1792477444 TuxCare security update for uuid (1 CVE)

TuxCare rebuilt uuid to address 1 CVE. Fixed in 3.3.2-tuxcare.1...

CLSA-2026-1792476235 TuxCare security update for uuid (1 CVE)

TuxCare rebuilt uuid to address 1 CVE. Fixed in 8.0.0-tuxcare.1...

CLEANSTART-2026-FA47344 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

CVE-2026-41907 affects multiple packages. uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. See references for individual vulnerability details...

PT-2026-133376

TuxCare rebuilt uuid to address 1 CVE. Fixed in 3.3.2-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-98723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf nvmet: Improve nvmetallocctrl interface and implementation added a second...

PT-2026-133368

TuxCare rebuilt uuid to address 1 CVE. Fixed in 8.0.0-tuxcare.1...

DEBIAN-CVE-2026-98723

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

CVE-2026-98723

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

CVE-2026-98723

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

UBUNTU-CVE-2026-98723

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

EUVD-2026-103977

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

CVE-2026-98723

The Linux kernel contains a vulnerability in the nvmet subsystem where the hostid is incorrectly copied into the controller. Due to a sequence error in the nvmet_alloc_ctrl() implementation, nvmet_ctrl_init_pr() snapshots a nil UUID into per-controller per-namespace reservation references because...