Intel Gaudi vLLM Hardware Plugin Local DoS Vulnerability (INTEL-SA-01487)

Vulnerability Overview Vulnerability ID: INTEL-SA-01487 Vulnerability Category: Software Impact: Denial of Service Severity: Medium Original Release Date: August 11, 2026 Last Revised Date: August 11, 2026 Summary: A potential security vulnerability exists in the vLLM hardware plugin for Intel® Gaudi® software, which could lead to a denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVE Number: CVE-2026-27765 Description: For certain vLLM hardware plugins in Intel® Gaudi® software versions prior to 0.16.0, user applications may allow for denial of service. An authenticated user combined with a low-complexity attack vector may result in denial of service. This result may occur via local access, requiring no special internal knowledge and no user interaction when the attack payload is not present. The potential vulnerability may impact Confidentiality (None), Integrity (None), and Availability (High), with no subsequent impact on Confidentiality (None), Integrity (None), or Availability (None). CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products Affected Products: vLLM hardware plugin for Intel® Gaudi® software in versions 0.19.0, 0.19.1, or earlier versions down to 0.16.0. Remediation Recommendation: - Intel recommends updating the vLLM hardware plugin for Intel® Gaudi® software to version 0.16.0, 0.17.1, 0.19.1.post1, or later. - Updates are available for download at: https://github.com/vllm-project/vllm-gaudi/releases Additional Information Acknowledgments: This issue was discovered internally by Intel employees. Revision History: - Version 1.0, Date August 11, 2026, Description: Initial release Legal Statement and Disclaimer Intel provides these materials "as is," without warranty of any kind, either express or implied. All products, dates, and specifications are based on current expectations and are subject to change without notice. Intel products and described services may contain known design defects or errors, known as errata, which may cause the product to deviate from published specifications. Products for which service updates have ended may no longer receive feature and security updates. The functionality and benefits of Intel technologies depend on system configuration, and may require enabled hardware, software, or service activation. Performance varies by system configuration, and products and components may not be absolutely secure. Certain results have been estimated or simulated for internal Intel analysis or architectural simulation or modeling, and are provided to you for informational purposes only. Any differences in system hardware, software, or configuration may affect actual performance. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries. Other names and brands may be claimed as the property of their respective owners. Reporting Vulnerabilities If you have security concerns or vulnerabilities regarding Intel-branded products or technologies, please submit your report through the Intigriti platform. For issues related to the presence of Intel's external websites (Intel.com and related subdomains), please contact Intel’s External Security Research Team. Need Product Support? If you have questions about Intel product security features, need technical support, or want product updates or patches, please visit the Support and Downloads page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Gaudi vLLM Hardware Plugin Local DoS Vulnerability (INTEL-SA-01487)