UBUNTU-CVE-2026-118375: Critical severity ubuntu/llama.cpp vulnerability
Published Oct 28, 2026
·Updated
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv() function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack variable in rpcserveclient(), crashing the server or potentially executing code.
Affected Software
2 affected components
ubuntu/llama.cpp*
ubuntu/llama.cpp*
Event History
Oct 28, 2026
CVE Published
via OSV·03:17 AM
Data Sourced
via OSV·03:17 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
How can I determine whether my deployment is affected?
Check the installed llama.cpp build. Builds from b8841 before b11865 are affected if they expose the ggml-rpc RDMA transport.
2
Does exploitation require authentication or user interaction?
No. An unauthenticated peer can exploit the issue by advertising RDMA capabilities in the HELLO message; no user interaction is required.