Denial of Service via crafted HDF5 weight loading file
Summary
Denial of Service via crafted HDF5 weight loading file. Red Hat rates this important (CVSS 7.6). Weakness: CWE-770. Affected package(s): rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1772093304, rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1772093283, rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1772093300, rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1771502844, rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1771502884, rhoai/odh-modelmesh-runtime-adapter-rhel9:1772094445. Resolved in Red Hat advisory RHSA-2026:4271 — update the affected packages (`sudo dnf update`).
- rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1772093304
- rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1772093283
- rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1772093300
- rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1771502844
- rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1771502884
- rhoai/odh-modelmesh-runtime-adapter-rhel9:1772094445
- rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1772093272
- rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1771502910
- rhtas/model-transparency-rhel9:1772614635
- rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1771502897
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
- RHSA-2026:4271
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Mitigation checklist
- Update the affected package(s) to the fixed version shipped in RHSA-2026:4271 (`sudo dnf update` / `yum update`).
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.