RHSA-2025:15839HighCVSS 7.5
Red Hat Security Advisory: Red Hat Enterprise Linux AI 1.5 (AMD)
🔗 CVE IDs covered (2)
📋 Description
CVE-2025-47277 — vllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service CVE-2025-48379 — python-pillow: pillow: Pillow DDS Heap Buffer Overflow
🎯 Affected products2
- Red Hat Enterprise Linux AI 1.5
- registry.redhat.io/rhelai1/bootc-amd-rhel9@sha256:e683240d86973334e53882f4978b89b5c2a9f452b4080392c33b72bd57f91b63_amd64 as a component of Red Hat Enterprise Linux AI 1.5
✅ Remediation
For more information visit https://access.redhat.com/errata/RHSA-2025:15839 Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2025:15839
- externalhttps://access.redhat.com/security/cve/CVE-2025-48379
- externalhttps://access.redhat.com/security/cve/cve-2025-47277
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15839.json