vllm p2p never connected zmq_exhaustion

影響: pip:vllm < 0.32.0 → 0.32.0

When the OffloadingConnector uses TieringOffloadingSpec with a P2P secondary tier, an API client can submit many unique non-listening peer addresses through kv_transfer_params.prefill. vLLM keeps every never-established P2P session and its ZeroMQ sockets after the request finishes. On vLLM 0.26.0, 340 such peers filled the default ZeroMQ context socket quota; creating the next peer raised an uncaught ZMQError, terminated EngineCore, and shut down the API server. The path was reproduced with a n…

GitHub Advisory Databaseで読む

2026/10/27 23:45、GitHub Advisory Databaseが「vllm p2p never connected zmq_exhaustion」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「警告」(medium) です。関連する技術: Python。CVE: CVE-2026-94624。