Red Hat Security Advisory: Red Hat AI Inference 3.4.6 (cuda)

The Red Hat security advisory RHSA-2026:83120 references multiple CVEs affecting Red Hat AI Inference 3.4.6 (cuda). These CVEs include CVE-2026-15679 among others, covering a range of CWEs such as CWE-502 (Deserialization of Untrusted Data), CWE-770 (Allocation of Resources Without Limits), CWE-617 (Reachable Assertion), CWE-295 (Improper Certificate Validation), CWE-835 (Loop with Unreachable Exit Condition), CWE-347 (Improper Verification of Cryptographic Signature), CWE-66 (Improper Control of a Resource Through its Lifetime), CWE-94 (Improper Control of Generation of Code), and CWE-911 (Improper Restriction of XML External Entity Reference). The advisory does not specify affected versions or provide patch links, nor does it confirm any known exploits in the wild. The vendor advisory does not mention any available fixes or remediation steps.

The vulnerabilities collectively could impact the security posture of Red Hat AI Inference Server installations, potentially allowing exploitation of issues related to deserialization, resource allocation, cryptographic verification, and code generation control. However, without specific exploitation details or confirmed active exploits, the precise impact remains generalized to the categories of the listed CWEs.

The vendor advisory does not indicate any available patches or fixes at this time. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No specific mitigation steps are provided by Red Hat in the advisory.