CVE-2026-73558
Fixed in a distro release EPSS <1%CVSS 5.3
vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0.
Products: vllm-project vllm
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | vllm | 0.27.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kserve-huggingfaceserver-cuda-13.3 | no fix |
| Chainguard | lmcache-cuda-12.8 | no fix |
| Chainguard | nemo-rl-cuda-13.0-vllm | no fix |
| Chainguard | py3.10-vllm-cuda-12.4 | no fix |
| Chainguard | py3.12-vllm-cuda-12.4 | no fix |
| Chainguard | tritonserver-backend-vllm-cuda-13.0 | 25.11-r14 |