Red Hat Enterprise Linux AI 3.4 vulnerabilities

3 known vulnerabilities in Red Hat Enterprise Linux AI 3.4 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  vllm: Improper Control of Generation of Code

  CVE-2026-41523Jun 22, 2026Vllm-project

  vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function loading allows any unauthenticated attacker to achieve arbitrary code execution on the server by publishing

• 8.2 High severity

  net/http: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-39821May 22, 2026Go standard libraryEPSS 1.83%

  The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege e

• 7.1 High severity

  golang.org/x/crypto/ssh: Incorrect Authorization

  CVE-2026-46595May 22, 2026Golang.org/x/crypto

  Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.