Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.3%top 77%

Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.1

0
High
Published: 04/23/2026 (04/23/2026, 13:36:23 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models (LLMs) for enterprise applications.

CVSS v4.0

Attack Vector
Local
Attack Complexity
Low
Attack Requirements
Present
Privileges Required
None
User Interaction
Active
Vuln. Confidentiality
High
Vuln. Integrity
High
Vuln. Availability
None
Subsq. Confidentiality
None
Subsq. Integrity
None
Subsq. Availability
None
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected software

Affected versions
Red HatRed Hat Enterprise Linux AIRed Hat Enterprise Linux AI 3.3amd64registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/30/2026, 10:10:10 UTC

Technical Analysis

The Red Hat security advisory RHSA-2026:10141 covers multiple vulnerabilities affecting Red Hat Enterprise Linux AI, a platform for enterprise large language models. Among the CVEs listed is CVE-2026-4519, which has a CVSS 4.0 vector indicating a high severity vulnerability with local attack vector, low attack complexity, partial user interaction, and high impact on confidentiality and integrity. The advisory announces the release of Red Hat Enterprise Linux AI 3.3.1 but does not detail any fixes or patches for the vulnerabilities. The affected product is Red Hat Enterprise Linux AI 3.3 and related images. No exploits are currently known in the wild. The advisory recommends ensuring previously released errata are applied before updating but does not specify a direct fix for these vulnerabilities.

Potential Impact

The vulnerabilities have a high severity rating, indicating they could potentially allow an attacker with local access and some user interaction to compromise confidentiality and integrity of the system. However, there are no known exploits in the wild at this time. The lack of explicit patch or fix information suggests these vulnerabilities remain unmitigated in the current release. The impact is limited to affected versions of Red Hat Enterprise Linux AI 3.3 and related components.

Mitigation Recommendations

The vendor advisory does not provide any official fix or patch for these vulnerabilities in Red Hat Enterprise Linux AI 3.3.1. It recommends applying all previously released errata relevant to the system before updating. Patch status is not yet confirmed — check the Red Hat advisory RHSA-2026:10141 and official Red Hat security resources for current remediation guidance. No specific mitigation steps are provided by the vendor at this time.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:10141
Cve Count
6
Additional Cves
["CVE-2026-4786","CVE-2026-6100","CVE-2026-25679","CVE-2026-27893","CVE-2026-32597"]
Cvss Version
null

Threat ID: 6a16097ce29bf47b506487f4

Added to database: 05/26/2026, 20:58:36 UTC

Last enriched: 07/30/2026, 10:10:10 UTC

Last updated: 07/31/2026, 19:22:59 UTC

Views: 195

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses