huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2026-5241: python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting
Component: python-transformers
Severity: Important
CWE: CWE-829 (Inclusion of Functionality from Untrusted Control Sphere)
CVSS v3: 7.7 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N)
Public date: 2026-06-03T12:33:10.227000+00:00

A flaw was found in python-transformers. An attacker can exploit this vulnerability by providing a malicious model repository. During model initialization, the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted configuration data. This allows the attacker to execute arbitrary code, potentially leading to credential theft, unauthorized access, or the deployment of backdoors.

Statement: This Important vulnerability in `python-transformers` allows for arbitrary code execution when loading a malicious LightGlue model, even if `trust_remote_code` is explicitly set to `False`. This occurs because untrusted serialized configuration data can override the security setting in nested model loading paths. Red Hat products utilizing `python-transformers` for AI/ML workloads, such as Red Hat AI Inference Server and Red Hat OpenShift AI, are affected, posing a significant risk of credential theft or system compromise if untrusted models are processed. The LightGlue model (and its vulnerable trust_remote_code handling) was introduced in transformers 4.53.0 and fixed in 5.5.0; the CNA-published affected range is all versions before 5.5.0.

Affected upstream versions: unspecified < 5.5.0
Fixed upstream versions: 5.5.0
Upstream repository: https://github.com/huggingface/transformers
Upstream fix commit: 676559d5022b74aaa0cee1cee0842b7f27c5320e
CVE-2026-52950: kernel: drm/xe/dma-buf: fix UAF with retry loop
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel, specifically within the drm/xe/dma-buf component. This Use-After-Free (UAF) vulnerability occurs due to an issue in a retry loop, where a buffer object is prematurely freed on error. An attacker could potentially exploit this to cause memory corruption, leading to system instability or, in some cases, arbitrary code execution.


Affected upstream versions: 6.18
Fixed upstream versions: 0, 6.18.33, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 39fdac6be02eb7c3460518c1c4085f75f935c4ce
CVE-2026-52973: kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's futex subsystem. The need_futex_hash_allocate_default() function incorrectly relies on CLONE_THREAD semantics, which can lead to non-concurrency issues when memory allocations (mm->futex_ref pcpu allocations) are shared across CLONE_VM clones, excluding vfork(). This can result in a use-after-free vulnerability in futex_hash_put, a form of memory corruption. Such vulnerabilities can potentially lead to system instability or other security impacts.

Statement: This vulnerability was introduced in Red Hat Enterprise Linux 9.8 and 10.2; therefore, earlier versions of RHEL are unaffected.

Affected upstream versions: 6.17
Fixed upstream versions: 0, 6.18.33, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 1dcd36420af2da5bd59306dba9caf78e3d248b1d
CVE-2026-52976: kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel. Specifically, within the `drm/xe` graphics driver, two error handling issues in the `xe_exec_queue_create_ioctl()` function could lead to memory corruption. This could result in a dangling pointer or a use-after-free vulnerability. A local attacker could potentially exploit these issues to cause a system crash (denial of service) or gain elevated privileges.


Affected upstream versions: 6.12
Fixed upstream versions: 0, 6.12.91, 6.18.33, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f93b00161213a0fe9f7ff1d8498ee5ca9e0a5c43
CVE-2026-52993: kernel: tipc: fix double-free in tipc_buf_append()
Component: kernel
Severity: Important
CWE: CWE-763 (Release of Invalid Pointer or Reference)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's Transparent Inter-Process Communication (TIPC) module. This vulnerability, a double-free, occurs when the `tipc_buf_append()` function incorrectly handles memory after a socket buffer (skb) reallocation. An attacker could potentially exploit this to cause system instability or a denial of service. In some scenarios, this type of memory corruption could also lead to arbitrary code execution.


Affected upstream versions: 4.15
Fixed upstream versions: 0, 5.10.258, 5.15.209, 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: a438975a6dcdbd70865978c021650d1485586f0b
CVE-2026-53006: kernel: ipv6: fix possible UAF in icmpv6_rcv()
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's IPv6 (Internet Protocol version 6) implementation. This vulnerability, a Use-After-Free (UAF) error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption, which may lead to a denial of service or, in some scenarios, arbitrary code execution.


Affected upstream versions: 4.4
Fixed upstream versions: 0, 5.10.258, 5.15.209, 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 7bff2c8fe5c35ae58bf73104f53db3676e6e5d94
CVE-2026-53009: kernel: ice: fix double-free of tx_buf skb
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when ice_tso() or ice_tx_csum() functions fail, can lead to a double-free of a network buffer (skb). This occurs because a transmit buffer (tx_buf) may still point to an already freed buffer. If the network interface is subsequently brought down, this double-free can be triggered, potentially leading to a system crash or denial of service (DoS).

Statement: A double free can occur in the Intel ice TX path when ice_xmit_frame_ring() stores an skb in the first tx_buf and marks it as ICE_TX_BUF_SKB, then an ice_tso() or ice_tx_csum() failure drops and frees the skb while the tx_buf still points to it. If no later packet overwrites that descriptor before the interface or TX ring is cleaned, ice_clean_tx_ring() can free the same skb again. For the CVSS the PR:L because a local user or process that can transmit traffic through an affected ice interface may reach the TX path, although reliable triggering also depends on forcing an offload error and a later cleanup window.

Affected upstream versions: 4.17
Fixed upstream versions: 0, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 4c08fc2119ef0281cfa2cee007acf0a251be55f2
CVE-2026-53016: kernel: crypto: ccp - copy IV using skcipher ivsize
Component: kernel
Severity: Moderate
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's cryptographic coprocessor (CCP) driver. When processing AF_ALG rfc3686-ctr-aes-ccp requests, the ccp_aes_complete() function attempts to restore more data than the allocated buffer for the Initialization Vector (IV) can hold. This leads to a buffer overrun, which can result in memory corruption within the kernel.

Statement: An out-of-bounds write exists in the AMD CCP AES completion path because ccp_aes_complete() restores AES_BLOCK_SIZE bytes into req iv even when the selected skcipher exposes a shorter IV. For RFC3686 CTR AES through AF_ALG, the caller IV can be 8 bytes while the driver copies 16 bytes, overwriting memory past the provided IV buffer. For the CVSS the PR:L is used because a local user or local process can reach AF_ALG crypto interfaces without needing full administrator privileges when the vulnerable CCP backed algorithm is available. The issue is not network reachable and requires local code execution on a system with the affected CCP crypto driver and algorithm available.

Affected upstream versions: 3.14
Fixed upstream versions: 0, 5.10.258, 5.15.209, 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 939061b2d0f7f15114e34b4ce878ef50ff4089c3
CVE-2026-53059: kernel: dm log: fix out-of-bounds write due to region_count overflow
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 6.3 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's device-mapper log (dm log) component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log operations. Successful exploitation of this flaw can cause a kernel crash, resulting in a Denial of Service (DoS) for the affected system.


Affected upstream versions: 2.6.12
Fixed upstream versions: 0, 5.10.258, 5.15.209, 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 44ab8875ae4a2842bde2d756bed195d375e0debb
CVE-2026-53071: kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7.5 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-24T00:00:00+00:00

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol (L2CAP) implementation. A remote Bluetooth Low Energy (BLE) device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list, potentially causing a Denial of Service (DoS) by making the system unstable or unresponsive. The vulnerability is due to a missing channel lock when a channel is deleted.

Statement: Bluetooth L2CAP ECRED reconfiguration response handling can call l2cap_chan_del() without holding the channel lock while another thread may be iterating the same channel list. A remote BLE peer in radio range can send a crafted ECRED reconfiguration response and trigger a race that may corrupt the L2CAP channel list, leading at least to a kernel crash or connection state corruption. The issue is adjacent network reachable rather than Internet reachable because Bluetooth radio proximity is required.

Affected upstream versions: 5.7
Fixed upstream versions: 0, 5.10.258, 5.15.209, 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 96dca51715d86559ed6ed8028e5445cecb80f3ae
CVE-2026-53266: kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-01T12:00:00+00:00

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT (Source Network Address Translation) module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP (Address Resolution Protocol) sender hardware address rewrite. This could lead to unintended system behavior, a denial of service, or potentially local privilege escalation, where an attacker gains higher access rights than intended.

Statement: An Important flaw in the Linux kernel's ebtables SNAT target allows a local attacker to achieve privilege escalation, memory corruption, or denial of service. This vulnerability requires specific bridge netfilter rules to be configured, limiting its impact to systems with such specialized network configurations.

Affected upstream versions: 5.4.73 < 5.5, 5.8.17 < 5.9, 5.9.2 < 5.10, 5.10
Fixed upstream versions: 0, 5.10, 5.10.259, 5.15.210, 5.5, 5.9, 6.1.176, 6.12.94, 6.18.36, 6.6.143, 7.0.13, 7.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87
CVE-2026-53359: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role
Component: kernel
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Public date: 2026-07-04T00:00:00+00:00

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism. This vulnerability occurs when a host page directory entry (PDE) mapping is changed from within the guest, leading to an unexpected role mismatch in shadow paging. This mismatch can cause a use-after-free condition, where the system attempts to access memory that has already been released. Such a condition can lead to system instability, denial of service, potentially the execution of arbitrary code or guest-to-host escape.

Statement: This is an Important flaw in the KVM x86 shadow paging mechanism where an attacker with privileged access inside the guest VM could trigger a use-after-free condition by manipulating page directory entries on the host. This could lead to system instability, denial of service, or potentially arbitrary code execution on the host.

In Red Hat Enterprise Linux 7, nested virtualization for KVM is a Technology Preview feature and the nested parameter defaults to 0 (disabled) for both kvm_intel and kvm_amd.

Affected upstream versions: 2.6.36
Fixed upstream versions: 0, 6.1.177, 6.12.95, 6.18.38, 6.6.144, 7.1.3, 7.2-rc1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: b1337aae5e194324e4810d561764e7793f8b3864
CVE-2026-53362: kernel: kernel: ipv6 frag escape
Component: kernel
Severity: Important
CWE: CWE-130 (Improper Handling of Length Parameter Inconsistency)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-21T00:00:00+00:00

A flaw was found in the Linux kernel's ipv6 networking subsystem. An incorrect parameter length calculation allows an attacker with permissions to create UDP sockets to trigger overwrites of kernel memory, potentially leading to privilege escalation, data corruption, or a system crash.


Affected upstream versions: 6.0
Fixed upstream versions: 0, 6.1.177, 6.12.95, 6.18.38, 6.6.144, 7.1.3, 7.2-rc1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git
Upstream fix commit: 736b380e28d0
CVE-2026-53366: kernel: ipv4: account for fraggap on the paged allocation path
Component: kernel
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-07-16T00:00:00+00:00

A flaw was found in the Linux kernel's handling of IPv4 network packets. An error in how the kernel accounts for fragmented data during memory allocation can lead to an undersized memory buffer. This memory handling issue could potentially be exploited by a remote attacker to cause a system crash or denial of service.


Affected upstream versions: 6.0
Fixed upstream versions: 0, 6.1.178, 6.12.95, 6.18.38, 6.6.144, 7.1.3, 7.2-rc1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5c6375bced6147ec2e460ee3b653f4860d5ecdc2
CVE-2026-53422: erlang: ssh: Erlang OTP ssh: Information disclosure via SFTP REALPATH handler
Component: erlang
Severity: Moderate
CWE: CWE-204 (Observable Response Discrepancy)
CVSS v3: 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Public date: 2026-07-02T16:06:03.802000+00:00

A flaw was found in Erlang OTP's Secure Shell (SSH) component, specifically within the SSH File Transfer Protocol (SFTP) daemon's ssh_sftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories outside their authorized root directory. This vulnerability allows an attacker to determine if specific paths exist on the server's file system, potentially revealing sensitive information about the system's structure. While this issue does not directly expose file contents or grant write access, the gathered information could be used to facilitate further attacks.


Affected upstream versions: 3.0.1 < *, 17.0 < *
Fixed upstream versions: OTP-29.0.3
Upstream repository: https://github.com/erlang/otp
Upstream fix commit: 059e5785ef8c1d423820ca633fb7b37f47645172
CVE-2026-53486: decompress: @xhmikosr/decompress: Decompress: Arbitrary file read/write via crafted archive extraction
Component: decompress
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Public date: 2026-07-14T20:07:14.190000+00:00

A flaw was found in the decompress package for Node.js. A remote attacker can exploit this vulnerability by crafting a malicious archive. When the archive is extracted, it can create files and links outside the intended directory, leading to unauthorized reading or writing of files. This is due to improper handling of hardlink and symlink entries, insufficient path containment checks, and failure to remove setuid, setgid, or sticky bits from file modes. This can result in high confidentiality and integrity impacts.

Statement: Red Hat Build of Keycloak, Red Hat Advanced Cluster Management (VolSync), Red Hat Hardened Images (dotnet8.0), and the Fedora/EPEL yarnpkg packages bundle the original, unmaintained npm decompress package (version 4.2.1 or earlier), which does not receive an upstream fix for this issue. None of these components use the actively maintained @xhmikosr/decompress fork that received the fix in versions 10.2.1 and 11.1.3. Red Hat rates this issue with a CVSS score of 8.1 (Important), reflecting that in these products archive extraction is performed on locally supplied or build-time archives rather than automatically on arbitrary network-supplied input, which Red Hat scores as requiring user interaction (UI:R) in contrast to the upstream CVSS score of 9.1.

Affected upstream versions: < 10.2.1, >= 11.0.0, < 11.1.3
Fixed upstream versions: v11.1.3
Upstream repository: https://github.com/XhmikosR/decompress
Upstream fix commit: 281cefa00cd4275c10479bc5f1abba6b14dee8bd
CVE-2026-54059: python-pillow: Pillow: Denial of Service via crafted PCF font data
Component: python-pillow
Severity: Important
CWE: CWE-409 (Improper Handling of Highly Compressed Data (Data Amplification))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-07-06T18:46:09.433000+00:00

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primary consequence is a Denial of Service (DoS), which could make the affected system or application unavailable.

Statement: A flaw was found in the Python Pillow library. The PcfFontFile._load_bitmaps() method reads glyph dimensions from the PCF METRICS section and passes them directly to Image.frombytes() without calling Image._decompression_bomb_check(). This allows crafted PCF font data to cause excessive memory allocation, leading to a denial of service condition. An attacker could exploit this by providing a specially crafted PCF font file to an application that uses Pillow's font loading functionality.

Affected upstream versions: < 12.3.0
Fixed upstream versions: 12.3.0
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: 0a263e6264aa5399988d9acd3bbfbca2ca3ec77d
CVE-2026-54060: python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
Component: python-pillow
Severity: Important
CWE: CWE-1050 (Excessive Platform Resource Consumption within a Loop)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-07-06T18:49:23.788000+00:00

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.

Statement: A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.

Affected upstream versions: < 12.3.0
Fixed upstream versions: 12.3.0
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: 0a263e6264aa5399988d9acd3bbfbca2ca3ec77d
CVE-2026-54235: vllm: vLLM: Denial of Service due to improper floating-point validation
Component: vllm
Severity: Moderate
CWE: CWE-1287 (Improper Validation of Specified Type of Input)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Public date: 2026-06-22T21:59:02.710000+00:00

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The temperature validation gates, which use comparison operators, incorrectly handle Not-a-Number (NaN) and positive Infinity values in Python's IEEE 754 float semantics. These invalid values can bypass validation and propagate to GPU sampling kernels, leading to undefined behavior or CUDA errors that can crash the inference worker. This could allow an attacker to cause a Denial of Service (DoS) by providing specially crafted input.

Statement: This Moderate impact flaw in vLLM, as used in Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI, allows for a denial of service. Improper validation of floating-point values like Not-a-Number (NaN) or positive Infinity in temperature parameters can bypass security checks, leading to undefined behavior or CUDA errors that crash the inference worker. This could be exploited by providing specially crafted input to the LLM inference engine.

Affected upstream versions: < 0.23.1rc0
Fixed upstream versions: v0.24.0
Upstream repository: https://github.com/vllm-project/vllm
Upstream fix commit: d598d239737cfa37bcfcb98886ec3f3557fc7198