2019 matches found
CVE-2026-100651: Uncontrolled Resource Consumption
vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...
CVE-2026-98043
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL from a pointer with an unbounded offset regnotnull decides that a register holds a non-NULL value by looking at its type alone. For pointer types that allow arithmetic the type only guarantees a non-NULL...
Breaking the Black Box: Byte-Level Boundary Inference of Real-World Antivirus Systems
Whitepaper called Breaking The Black Box: Byte-Level Boundary Inference Of Real-World Antivirus Systems...
FragToken: Amplifying LLM Inference Costs through Noncanonical Token Generation
As large language model LLM inference becomes increasingly expensive, resource-consumption attacks pose a growing threat to model providers. Existing attacks typically amplify cost by inducing abnormally long or repetitive outputs on attacker-controlled or triggered requests, making them easier t...
Linux Distros Unpatched Vulnerability : CVE-2026-98134
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug...
TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models
Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...
Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)
Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (rocm)
Red Hat AI Inference 3.4.5 rocm is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cuda)
Red Hat AI Inference 3.4.5 cuda is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (spyre)
Red Hat AI Inference 3.4.5 spyre is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cpu)
Red Hat AI Inference 3.4.5 cpu is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (rocm)
Red Hat AI Inference 3.4.5 rocm is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)
Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cuda)
Red Hat AI Inference 3.4.5 cuda is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cpu)
Red Hat AI Inference 3.4.5 cpu is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (spyre)
Red Hat AI Inference 3.4.5 spyre is now available. Red Hat AI Inference...
gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102937 via virtualenv (20.30.0)
virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...
SUSE CVE-2026-90110
In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries in a Red-Black tree keyed deterministically on the remote IP address. Because tree lookups walk the RB-tree using...
CVE-2026-90110
In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries in a Red-Black tree keyed deterministically on the remote IP address. Because tree lookups walk the RB-tree using...