RHSA-2025:15843HighCVSS 7.5
Red Hat Security Advisory: Red Hat Enterprise Linux AI 1.5 (AMD)
🔗 CVE IDs covered (2)
📋 Description
CVE-2025-47277 — vllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service CVE-2025-48379 — python-pillow: pillow: Pillow DDS Heap Buffer Overflow
🎯 Affected products2
- Red Hat Enterprise Linux AI 1.5
- registry.redhat.io/rhelai1/instructlab-amd-rhel9@sha256:f34417c39c2f3b78f306d4249e892a9edf61f2a88bb18a3484c1df9716bdd324_amd64 as a component of Red Hat Enterprise Linux AI 1.5
✅ Remediation
For more information visit https://access.redhat.com/errata/RHSA-2025:15843 Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2025:15843
- externalhttps://access.redhat.com/security/cve/CVE-2025-48379
- externalhttps://access.redhat.com/security/cve/cve-2025-47277
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15843.json