CVE-2026-33846: GnuTLS: DTLS fragment heap overflow, DoS on AI inference

GnuTLS's DTLS handshake reassembly logic in merge_handshake_packet() matches fragments purely by handshake type and never validates that message_length stays consistent across all fragments of the same logical message, letting a remote, unauthenticated attacker allocate an undersized buffer and then overflow it with a later, larger fragment. There's no EPSS score, no CISA KEV listing, no public exploit, and no Nuclei scanner template, so opportunistic mass exploitation isn't happening yet — but this sits in a library carrying 78 other CVEs, has 129 downstream dependents, and directly ships inside Red Hat's AI Inference Server images (rhaiis/model-opt-cuda-rhel9, rhaiis/vllm-rocm-rhel9) and Discovery server/UI components. The CVSS vector (7.5, A:H with C:N/I:N) scores this as availability-only, so the realistic near-term outcome is crash/restart loops on any AI inference endpoint that terminates DTLS — but the underlying bug is a heap out-of-bounds write, a primitive that has historically escalated beyond DoS once someone invests in heap grooming. Patch GnuTLS to the version fixed in the applicable Red Hat errata (RHSA-2026:13274, 20611-20613, 26319, 26409, 29197, 30004, 30849, 30850) on any host running rhaiis, Discovery, or RHUI5/RHCOS components, and if DTLS transport isn't required for your inference traffic, disable it at the listener to remove the exposure entirely while patching rolls out.

No confirmed active exploitation of CVE-2026-33846 has been reported, but organizations should still patch proactively.

1) Patch GnuTLS/libtasn1 to the version fixed in the referenced Red Hat errata (RHSA-2026:13274, 20611, 20612, 20613, 26319, 26409, 29197, 30004, 30849, 30850) across all affected products: gnutls, gnutls-main, rhaiis/model-opt-cuda-rhel9, rhaiis/vllm-rocm-rhel9, discovery-server/ui-rhel9, rhui5 (cds/haproxy/installer/rhua), and rhcos. 2) Inventory which AI inference/serving hosts actually terminate DTLS and, where DTLS isn't required, disable it at the listener as an interim compensating control. 3) Segment DTLS-terminating endpoints from untrusted networks until patched. 4) Detection: monitor for unexpected crashes/restarts of GnuTLS-linked inference or Discovery processes, and watch for anomalous DTLS handshake traffic with repeated fragments carrying conflicting message_length values (IDS/IPS signature candidate). 5) Track vendor advisories for a public PoC or KEV addition, which would materially raise urgency.

This vulnerability affects the following AI/ML architecture patterns: model serving, inference infrastructure, container/orchestration security.

CVE-2026-33846 has a CVSS v3.1 base score of 7.5 (HIGH). The EPSS exploitation probability is 1.26%.