{"schema":"vulnpedia.research/1","cve":"CVE-2026-90554","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf","tags":["vendor-advisory","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-12T12:08:57.508Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-12T12:08:57.508Z","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf"},{"source":"nvd","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:28:13.590","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf"},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf"}]},{"url":"https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction","tags":["third-party-advisory","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-12T12:08:57.508Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-12T12:08:57.508Z","url":"https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction"},{"source":"nvd","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:28:13.590","url":"https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction"},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90554","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-90554"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532572","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532572"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90554","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-90554"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90554","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90554"}]},{"source":"euvd","sourceId":"EUVD-2026-76872","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76872","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-76872","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76872"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-gaudi-rhel9","product":"rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-spyre-rhel9","product":"rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","product":"rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-rocm-rhel9","product":"rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-spyre-rhel9","product":"rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-agent-rhel9","product":"rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-agent-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-controller-rhel9","product":"rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-controller-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-router-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9","product":"rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-llm-d-kv-cache-rhel9?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]},{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-90554","modified":"2026-09-24T20:51:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json"}]}],"vendorCoverage":{"total":27,"shown":27,"omitted":0,"source":"redhat"}}