This advisory covers Red Hat Enterprise Linux AI 3.3.1, which supports Granite family LLMs for enterprise use. It includes multiple CVEs, notably CVE-2026-25679, where the Go net/url.Parse function improperly validates host components, accepting invalid URLs by ignoring garbage before IP literals. This can cause denial of service. The advisory states no fix is currently available that meets Red Hat's criteria for deployment and stability. The vendor recommends ensuring all previous errata are applied before updating to 3.3.1. No known exploits are reported in the wild.

The vulnerabilities affect the integrity of input validation in the Go standard library used within Red Hat Enterprise Linux AI, potentially leading to denial of service conditions. No confidentiality or integrity impacts are reported. The overall impact is high due to availability disruption. No active exploitation is known at this time.

No official fix or patch is currently available for these vulnerabilities. Red Hat recommends applying all previously released errata relevant to the system before updating to the advised version. No specific mitigations are provided that meet Red Hat's criteria for ease of use and applicability. Users should monitor Red Hat advisories for future updates.