Release notes

Red Hat AI Inference 3.5

Highlights of what is new and what has changed with this Red Hat AI Inference release

Red Hat AI Documentation Team

Abstract

The release notes for Red Hat AI Inference summarize all new features and enhancements, notable technical changes, major corrections from the previous version, and any known bugs upon general availability.

Chapter 1. Red Hat AI Inference release notes

Red Hat AI Inference provides developers and IT organizations with a scalable inference platform for deploying and customizing AI models on secure, scalable resources with minimal configuration and resource usage.

These release notes document new features, enhancements, bug fixes, known issues, and deprecated functionality for each Red Hat AI Inference release. Security advisories and asynchronous errata updates are published separately as container images become available.

Chapter 2. Version 3.5.0 release notes

Red Hat AI Inference 3.5.0 provides container images that optimize inferencing with large language models (LLMs) for NVIDIA CUDA, AMD ROCm, Google TPU, Intel Gaudi, and IBM Spyre AI accelerators with multi-architecture support for s390x (IBM Z) and ppc64le (IBM Power).

The following container images are Generally Available (GA) from Content from registry.redhat.io is not included.registry.redhat.io:

  • registry.redhat.io/rhaiis/vllm-cuda-rhel9:3.5.0
  • registry.redhat.io/rhaiis/vllm-rocm-rhel9:3.5.0
  • registry.redhat.io/rhaiis/vllm-spyre-rhel9:3.5.0 for s390x and ppc64le
  • registry.redhat.io/rhaiis/model-opt-cuda-rhel9:3.5.0
  • registry.redhat.io/rhaiis/vllm-cpu-rhel9:3.5.0

The following container images are Technology Preview features:

  • registry.redhat.io/rhaiis/vllm-spyre-rhel9:3.5.0 for x86_64
  • registry.redhat.io/rhaiis/vllm-tpu-rhel9:3.5.0
  • registry.redhat.io/rhaiis/vllm-neuron-rhel9:3.5.0
  • registry.redhat.io/rhaiis/vllm-gaudi-rhel9:3.5.0
Important

Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.

This release expands the supported product and hardware configurations. For more information, see Supported product and hardware configurations.

Note

The following Technology Preview container image bundles a different upstream vLLM version:

  • vllm-neuron-rhel9:3.5.0 bundles vLLM v0.16.0.
Note

Starting with version 3.6, Red Hat AI Inference adopts a new release cadence. Early Access (EA) releases are replaced by supported fast releases, and GA releases are renamed to stable releases. Unlike EA releases, which carried no support, fast releases are officially supported for a limited window until the next fast release is available. Fast releases apply to Red Hat AI Inference container images only and do not include Distributed Inference with llm-d.

2.1. New Red Hat AI Inference features

Red Hat AI Inference 3.5.0 packages the upstream vLLM v0.24.0 release. You can review the complete list of updates in the upstream Content from github.com is not included.vLLM v0.24.0 release notes.

NVIDIA DGX Spark GB10 support
Added support for the NVIDIA DGX Spark GB10 Superchip platform, enabling AI inference on workstations and edge deployments with enterprise lifecycle and production support.
DiffusionGemma model support
Added support for DiffusionGemma (dLLM), a discrete diffusion large language model based on the Gemma 4 backbone.
IBM Z Spyre vision encoder support for multimodal models
In IBM Z systems with IBM Spyre AI accelerators, the vision encoder for multimodal models now runs on IBM Neural Network Processing Assist (NNPA) instead of the CPU through sendnn-inference.
Models as a Service on non-OpenShift Kubernetes (Technology Preview)
Platform operators can deploy Models as a Service (MaaS) on non-OpenShift Kubernetes environments to provide governed model access. MaaS on non-OpenShift Kubernetes delivers rate limiting, API access control, and subscription tier management on Azure Kubernetes Service (AKS) clusters. The deployment uses a Helm chart that installs the opendatahub-operator, which deploys the ai-gateway-operator and its dependencies, including cert-manager, Gateway API, Istio, and LeaderWorkerSet. Authentication uses Kubernetes service account tokens and API keys.
Adversarial vulnerability scanning for Red Hat AI validated models

New models added to the Red Hat AI validated models catalog now undergo automated adversarial vulnerability scanning as part of the validation process. This extends the existing validation pipeline with a behavioral security assessment of each model.

The scans use Content from github.com is not included.garak, an open-source LLM vulnerability scanner, to probe each model’s live responses against a broad range of adversarial attack patterns.

Scans are run by the Red Hat model validation team with Red Hat EvalHub. EvalHub ensures a consistent, repeatable validation methodology across every newly validated model. The resulting quantitative vulnerability scores are published on each model entry in the Hugging Face catalog, alongside existing accuracy and performance data.

Vulnerability scores provide evidence-based insight into a model’s security posture, supporting model selection and providing input to internal model risk management and AI security review processes.

2.2. New Distributed Inference with llm-d features

Distributed Inference with llm-d is a Kubernetes-native framework that provides enterprise-grade inference serving for production AI workloads.

Intelligent inference scheduling for managed Kubernetes
You can choose from several LLMInferenceService deployment patterns for Distributed Inference with llm-d, including single-GPU, prefill and decode disaggregation, cache-aware, and flow-control.
Inference-aware pod lifecycle for Distributed Inference with llm-d
You can perform routine deployment operations, such as rolling updates, scale-downs, and node maintenance, without dropping active inference requests. With inference-aware pod lifecycle management, the system safely transitions pods and prevents routing traffic to instances that are still loading model weights. This ensures uninterrupted service during scaling and maintenance activities.
Service-level SLI metrics
You can monitor end-to-end inference performance from the user’s perspective by using service-level Prometheus histogram metrics exposed by the Endpoint Picker in Distributed Inference with llm-d deployments. Unlike pod-level vLLM metrics, these metrics include scheduler queue wait time and network latency.
Disaggregated prefill-decode (Technology Preview)

Separates the compute-intensive prefill phase from the latency-sensitive decode phase, allowing each phase to scale independently on optimized hardware.

Important

Disaggregated prefill-decode is a Technology Preview feature on OpenShift Container Platform and Azure Kubernetes Service (AKS). On CoreWeave Kubernetes Service (CKS), disaggregated prefill-decode is generally available (GA).

Batch inference with the OpenAI-compatible Batches API (Technology Preview)
Distributed Inference with llm-d supports batch inference through the OpenAI-compatible /v1/batches API. You can submit large volumes of requests asynchronously and retrieve results on your own schedule without maintaining an active connection. The scheduler runs batch workloads during periods of low cluster activity at a lower priority than real-time traffic, so that live user SLAs are never affected.
Distributed Inference with llm-d on Amazon EKS (Technology Preview)
Amazon EKS is now supported as a Technology Preview platform for deploying Distributed Inference with llm-d. Supported EC2 GPU instance types include the P4d, P5, and G5 families. Known limitations include prefill and decode disaggregation over EFA, multi-node tensor parallelism over EFA, and FIPS enforcement on non-FIPS nodes.
KV cache offloading to shared storage in Distributed Inference with llm-d (Developer Preview)

Platform operators can offload KV cache from GPU memory to shared persistent storage by using a tiered prefix cache hierarchy in Distributed Inference with llm-d. When GPU HBM cache is full, KV cache blocks spill to CPU DRAM, and when CPU memory is exhausted, blocks spill to a CephFS shared file system. This three-tier cache hierarchy (HBM → CPU → CephFS) sustains inference throughput as concurrent users and context lengths grow beyond what GPU and CPU memory alone can hold.

Multiple inference replicas in an llm-d cluster can share the same cached KV data on CephFS, so that new replicas benefit from existing cache immediately and cache persists across pod restarts and rescheduling. KV cache offloading is validated on NVIDIA H100 and H200 GPUs with CephFS on Red Hat OpenShift Data Foundation.

LoRA-aware request routing (Developer Preview)

When you configure LoRA adapters on an LLMInferenceService resource, the inference scheduler automatically enables the lora-affinity-scorer to route requests to pods where the target adapter is already loaded. This reduces first-token latency and improves GPU memory efficiency for multi-adapter deployments by avoiding unnecessary adapter cold-loads.

The current Developer Preview implementation provides routing differentiation between replicas. Full locality-based routing is planned for a future release.

End-to-end distributed tracing (Developer Preview)
Platform operators can trace distributed inference requests end-to-end across service boundaries by using OpenTelemetry-compatible distributed tracing. Traces correlate latency and errors across the full request path, from the gateway through the router-scheduler to model servers.
Wide expert parallelism (Developer Preview)
Distributed Inference with llm-d supports distributed inference of mixture-of-experts (MoE) models across many GPU nodes for cost-effective scaling of large models.

2.3. New Red Hat AI Model Optimization Toolkit features

Red Hat AI Model Optimization Toolkit 3.5.0 packages the upstream LLM Compressor v0.12.0 release. You can review the complete list of updates in the upstream Content from github.com is not included.LLM Compressor v0.12.0 release notes.

2.4. Red Hat AI Omni-Inference Container (Developer Preview)

Red Hat AI Omni-Inference Container provides developers and IT organizations with a scalable inference platform for deploying and customizing omni-modality (text, audio, image) AI models on secure, scalable resources with minimal configuration and efficient resource usage.

Red Hat AI Omni-Inference Container provides container images that optimize inference with omni-modality generative AI models for NVIDIA CUDA.

The following container image is Developer Preview from quay.io:

  • quay.io/vllm/vllm-omni-cuda:0.22.0_rhaiv.1

Red Hat AI Omni-Inference Container offers official support for the following model collections:

Table 2.1. Supported model collections

ModelSizeInput modalitiesOutput modalities

Qwen3-Omni

63.4 - 70.5 GB

Text, Audio, Image, Video

Text, Audio

FLUX.2

23.7 - 178 GB

Text, Image

Image

Qwen-TTS

2.5 - 4.5 GB

Text

Audio

Voxtral-TTS

0.6 - 16 GB

Text

Audio

Tensor parallelism

Tensor parallelism shards the weights of each model layer across multiple GPUs to reduce memory pressure and increase throughput. This technique is specifically intended for large models with massive layers, such as autoregressive Large Language Models (LLMs) and Diffusion Transformers (DiTs).

For multi-stage models, the best approach is typically using stage configurations to distribute different stages across different physical devices. However, you can also combine these strategies: if a multi-stage model (such as Qwen3-Omni) contains an exceptionally large individual stage, you can still apply tensor parallelism within that specific stage while allocating the remaining, smaller stages to separate devices.

For detailed configuration steps and syntax, refer to the upstream documentation for Content from docs.vllm.ai is not included.tensor parallelism and Content from docs.vllm.ai is not included.stage configurations.

Model CPU offload

CPU offload is a serving configuration that stores model weights in system memory, only loading them into GPU VRAM as they are needed for a model forward pass. This trades server performance for GPU memory pressure, allowing GPUs to serve models that are larger than their available VRAM.

This feature is strictly supported for diffusion workloads such as DiT models. It cannot be used with multi-stage Autoregressive (AR) pipelines such as Qwen3-Omni or Qwen3-TTS.

Cache-DiT

Cache-DiT is an inference optimization algorithm for diffusion pipelines that skips certain low-impact computations to trade output quality for throughput.

For more fine-grained configuration of Cache-DiT, refer to the Content from docs.vllm.ai is not included.upstream documentation.

Prometheus metrics

Prometheus metrics are signals a server provides about its own performance and load to outside observers for autoscaling and monitoring purposes.

For more metrics configuration, refer to the Content from docs.vllm.ai is not included.upstream documentation.

CFG parallel

With Classifier-Free Guidance (CFG) Parallel, you can distribute the forward passes through the diffusion transformer for standard CFG, such as positive versus negative or empty prompts, across multiple GPUs. This is a diffusion-only feature.

For more information, see the Content from docs.vllm.ai is not included.vLLM-Omni CFG-Parallel Guide.

Important

Red Hat AI Omni-Inference Container is a Developer Preview feature only. Developer Preview features are not supported by Red Hat in any way and are not functionally complete or production-ready. Do not use Developer Preview features for production or business-critical workloads. Developer Preview features provide early access to upcoming product features in advance of their possible inclusion in a Red Hat product offering, enabling customers to test functionality and provide feedback during the development process. These features might not have any documentation, are subject to change or removal at any time, and testing is limited. Red Hat might provide ways to submit feedback on Developer Preview features without an associated SLA.

2.5. Resolved issues

  • AMD ROCm MI300X memory access faults during CUDA graph capture are now resolved.

    Previously, when running models such as meta-llama/Llama-3.2-1B-Instruct or ibm-granite/granite-3.2-2b-instruct on AMD MI300X accelerators, GPU memory access faults occurred with the error "Memory access fault by GPU node-2". This issue is now resolved.

  • AMD Zen CPU deployments no longer crash due to zentorch plugin incompatibility.

    Previously, the zentorch vLLM plugin supported vLLM versions 0.15.0 through 0.18.0, which was incompatible with the bundled vLLM version. The engine crashed during model loading with a segfault. This issue is now resolved.

  • Gemma 4 12B model now deploys successfully.

    Previously, the google/gemma-4-12B-it model failed to deploy because the bundled Transformers version did not support the gemma4_unified architecture. This issue is now resolved.

  • Mistral Small FP8-dynamic now starts successfully.

    Previously, the Mistral Small FP8-dynamic model failed to start with an error indicating that CachedMistralCommonBackend was missing the is_fast attribute. This issue is now resolved.

  • Granite 4.0-h-small model no longer crashes on first inference with ROCm.

    Previously, when deploying the ibm-granite/granite-4.0-h-small model on AMD ROCm accelerators, the vLLM server crashed during the first inference request due to a Triton JIT compilation failure. This issue is now resolved.

  • Qwen 3.5 and 3.6 models now work on CPU deployments.

    Previously, Qwen 3.5 and 3.6 models failed to run on CPU-only deployments due to an upstream vLLM issue with GDN attention operations. This issue is now resolved.

  • Prefix caching with models requiring transformers 5.x no longer crashes the inference scheduler.

    Previously, deploying models whose architecture was introduced in transformers 5.0 or later with prefix caching enabled (precise-prefix-cache-scorer) caused the inference scheduler to crash. The UDS tokenizer sidecar is replaced by a vLLM render sidecar that stays in sync with the serving image’s transformers version. This issue is now resolved.

2.6. Known issues

  • Gemma4 multimodal models produce incoherent output with FlashAttention-4 on H100/H200 GPUs.

    When serving Gemma4 multimodal models on NVIDIA H100 or H200 GPUs, the model produces incoherent output when processing image inputs with contexts longer than 1024 tokens. This issue affects the 12B, 26B-A4B, and 31B model sizes. FlashAttention-4, the default attention backend for Gemma4 on NVIDIA SM90+ GPUs, has incorrect sliding-window mask handling for multimodal attention in vLLM v0.24.0.

    To work around this issue, use the Triton attention backend:

    --attention-backend TRITON_ATTN
    Note

    This workaround disables FlashAttention-4 optimizations and reduces throughput. This issue will be addressed in version 3.5.1.

  • Mamba models might crash on AMD ROCm due to a Triton compiler bug.

    When running Mamba-based models on AMD ROCm accelerators, the Triton ROCm compiler might fail with an unrecoverable assertion error during JIT compilation of the _chunk_scan_fwd_kernel kernel. This issue is triggered by new tensor shapes during inference that were not warmed at startup.

  • Qwen2.5-VL models crash during encoder profiling on AMD ROCm.

    The Qwen/Qwen2.5-VL-7B-Instruct and RedHatAI/Qwen2.5-VL-7B-Instruct-FP8-Dynamic models crash with a hipErrorInvalidConfiguration error during VL encoder profiling on ROCm 7.14.

    To work around this issue, disable CUDA graph capture:

    --enforce-eager true
  • Qwen3.6-FP8 produces empty streaming output on AMD ROCm.

    The RedHatAI/Qwen3.6-35B-A3B-FP8-dynamic model produces empty streaming output when FP8 quantization is combined with CUDA graph capture on ROCm.

    To work around this issue, disable CUDA graph capture:

    --enforce-eager true
  • Gemma 4 MoE models crash on AMD ROCm due to unsupported activation function.

    The google/gemma-4-26B-A4B-it and RedHatAI/gemma-4-26B-A4B-it-FP8-Dynamic models crash because the aiter MoE kernel does not support the GELU_TANH activation function on ROCm.

    To work around this issue, use the Triton MoE backend:

    --moe-backend triton
  • Mistral-Small-3.1 FP8-dynamic returns invalid output on image inputs.

    The RedHatAI/Mistral-Small-3.1-24B-Instruct-2503-FP8-dynamic model returns NaN logits when processing image inputs on CUDA. Text, chat, tool calling, and structured output requests are not affected. The bf16 base model is also not affected.

    To work around this issue, disable graph compilation:

    --enforce-eager true
  • Kimi-K2.7-Code model fails to start due to non-writable tiktoken cache directory.

    The RedHatAI/Kimi-K2.7-Code model fails to start with a PermissionError when the tokenizer attempts to write to the /opt/app-root/tiktoken-cache/ directory. This issue occurs in rootless container environments where the cache directory is not writable.

    To work around this issue, set the TIKTOKEN_CACHE_DIR environment variable to a writable directory:

    TIKTOKEN_CACHE_DIR=/tmp/tiktoken
  • Prefix cache hit rate is overcounted when batching requests on IBM Spyre.

    When multiple requests are batched, the scheduler records prefix cache hits while checking scheduling constraints. This inflates the reported prefix cache hit rate. Inference results and scheduling behavior are not affected. No known workaround exists.

  • Qwen3.6-35B-A3B produces corrupted output after the first inference request.

    When serving the Qwen3.6-35B-A3B model, only the first request returns valid output. All subsequent requests return nonsensical results. No known workaround exists.

  • Phi-4 Vision model fails to load with SigLIP2 compatibility error.

    The RedHatAI/Phi-4-reasoning-vision-15B model requires a filter_out_non_signature_kwargs() function that is missing from the transformers library bundled with vLLM. The vLLM API server crashes at startup and cannot serve the model.

  • Prithvi TerraTorch model warmup fails on arm64 GH200 due to tensor size limit.

    When deploying the ibm-nasa-geospatial/Prithvi-EO-2.0-300M-TL-Sen1Floods11 model on arm64 NVIDIA GH200 accelerators, the vLLM engine core fails during warmup with the error "upsample_bilinear2d_nhwc only supports output tensors with less than INT_MAX elements". A PyTorch CUDA kernel limitation on arm64 causes this issue when the TerraTorch UPerNet decoder warmup tensor exceeds the signed 32-bit integer maximum.

    To work around this issue, deploy the model with limited concurrency:

    --max-num-seqs=8 --max-num-batched-tokens=8

    This configuration does not affect performance for geospatial models because each request uses only one token.

  • DeepSeek V4 model variants require explicit KV cache data type configuration.

    DeepSeek V4 model variants such as Flash and Pro fail to load with a KeyError for scale_fmt in the quantization configuration.

    To work around this issue, set the --kv-cache-dtype flag to fp8 when serving the model:

    vllm serve deepseek-ai/DeepSeek-V4-Flash --kv-cache-dtype fp8
  • Mistral Small 3.1 tool calling returns no tool calls with tool_choice=auto.

    When using the Mistral Small 3.1 model with tool calling and tool_choice=auto, the model does not return tool calls in the response.

  • Qwen2.5-VL FP8 tool calling fails because the model does not support tools.

    The Qwen2.5-VL FP8 model fails tool calling smoke tests because the model architecture does not support tool calling functionality.

  • Gemma 4 12B model evaluation crashes due to batch token limit.

    When running LM Evaluation Harness on the Gemma 4 12B model, the evaluation crashes with an error indicating that max_num_batched_tokens is too small for the prefix-LM multimodal model.

    To work around this issue, explicitly set --max-num-batched-tokens to any value greater than 2496:

    --max-num-batched-tokens 4096
  • Intel Gaudi deployments fail due to habana-torch-plugin version rejection.

    When deploying models on Intel Gaudi accelerators, the vllm-gaudi configuration validation rejects the habana-torch-plugin version because it does not conform to PEP 440 versioning requirements.

Chapter 3. Version 3.5.0-ea.2 release notes

Red Hat AI Inference 3.5.0-ea.2 provides container images that optimize inferencing with large language models (LLMs) for NVIDIA CUDA, AMD ROCm, Google TPU, Intel Gaudi, and IBM Spyre AI accelerators with multi-architecture support for s390x (IBM Z) and ppc64le (IBM Power).

Important

Red Hat AI Inference 3.5.0-ea.2 is an Early Access release. Early Access releases are not supported by Red Hat in any way and are not functionally complete or production-ready. Do not use Early Access releases for production or business-critical workloads. Use Early Access releases to test upcoming product features in advance of their possible inclusion in a Red Hat product offering, and to test functionality and provide feedback during the development process. These features might not have any documentation, are subject to change or removal at any time, and testing is limited. Red Hat might provide ways to submit feedback on Early Access features without an associated SLA.

The following container images are available as early access releases from Content from registry.redhat.io is not included.registry.redhat.io:

  • registry.redhat.io/rhaiis/vllm-cuda-rhel9:3.5.0-ea.2
  • registry.redhat.io/rhaiis/vllm-rocm-rhel9:3.5.0-ea.2
  • registry.redhat.io/rhaiis/vllm-spyre-rhel9:3.5.0-ea.2 (s390x, ppc64le, x86_64)
  • registry.redhat.io/rhaiis/model-opt-cuda-rhel9:3.5.0-ea.2
  • registry.redhat.io/rhaiis/vllm-cpu-rhel9:3.5.0-ea.2

The following container images are Technology Preview features:

  • registry.redhat.io/rhaiis/vllm-tpu-rhel9:3.5.0-ea.2
  • registry.redhat.io/rhaiis/vllm-neuron-rhel9:3.5.0-ea.2
  • registry.redhat.io/rhaiis/vllm-gaudi-rhel9:3.5.0-ea.2
Important

Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.

This release expands the supported product and hardware configurations. For more information, see Supported product and hardware configurations.

Note

The following Technology Preview container images bundle different upstream vLLM versions:

  • vllm-tpu-rhel9:3.5.0-ea.2 bundles vLLM v0.13.0.
  • vllm-neuron-rhel9:3.5.0-ea.2 bundles vLLM v0.16.0.
  • vllm-gaudi-rhel9:3.5.0-ea.2 bundles vLLM v0.19.1.

3.1. New Red Hat AI Inference developer features

Red Hat AI Inference 3.5.0-ea.2 packages the upstream vLLM v0.21.0 release. You can review the complete list of updates in the upstream Content from github.com is not included.vLLM v0.21.0 release notes.

AMD MI350P PCIe support
Added support for AMD Instinct™ MI350P PCIe accelerators with ROCm™ 7.14. The MI350P brings the AMD CDNA™ 4 architecture to standard data center server infrastructure. Designed in a dual-slot PCIe form factor, the MI350P features configurable total board power of up to 600 W and passive air cooling. This enables integration into enterprise data centers without major power or cooling infrastructure changes. It supports traditional 16-bit and 8-bit data formats, as well as MXFP6 and MXFP4 for efficient model serving, and includes 144 GB of HBM3E memory with up to 4.0 TB/s of peak memory bandwidth.
IBM Power supported models

The following models are supported on IBM Power (ppc64le) architecture:

  • mistralai/Mistral-small-3.2-24B-instruct-2506
  • intfloat/multilingual-e5-large
  • intfloat/multilingual-e5-large-instruct
  • ibm-granite/granite-4.1-8b-fp8
  • meta-llama/Llama-3.1-8b-instruct, including fine-tuned models and custom weights
Batch inference with the OpenAI-compatible Batches API in llm-d (Technology Preview)
Distributed Inference with llm-d supports batch inference through the OpenAI-compatible /v1/batches API. You can submit large volumes of requests asynchronously and retrieve results on your own schedule without maintaining an active connection. The scheduler runs batch workloads during periods of low cluster activity at a lower priority than real-time traffic, so that live user SLAs are never affected.
End-to-end distributed tracing for llm-d (Developer Preview)
Platform operators can trace distributed inference requests end-to-end across service boundaries by using OpenTelemetry-compatible distributed tracing. Traces correlate latency and errors across the full request path, from the gateway through the router-scheduler to model servers.

3.2. New Red Hat AI Model Optimization Toolkit developer features

Red Hat AI Model Optimization Toolkit 3.5.0-ea.2 packages the upstream LLM Compressor v0.10.0.2 release. You can review the complete list of updates in the upstream Content from github.com is not included.LLM Compressor v0.10.0.2 release notes.

3.3. Red Hat AI Omni Inference Container (Developer Preview)

Red Hat AI Omni Inference Container provides developers and IT organizations with a scalable inference platform for deploying and customizing omni-modality (text, audio, image) AI models on secure, scalable resources with minimal configuration and efficient resource usage.

Red Hat AI Omni Inference Container provides container images that optimize inference with omni-modality generative AI models for NVIDIA CUDA.

Container images

The following container image is Developer Preview from quay.io:

  • quay.io/vllm/vllm-omni-cuda:0.22.0_rhaiv.1

Supported models

Red Hat AI Omni Inference Container offers official support for the following model collections:

ModelSizeInput modalitiesOutput modalities

Qwen3-Omni

63.4 - 70.5 GB

Text, Audio, Image, Video

Text, Audio

FLUX.2

23.7 - 178 GB

Text, Image

Image

Qwen-TTS

2.5 - 4.5 GB

Text

Audio

Voxtral-TTS

0.6 - 16 GB

Text

Audio

Developer features

Tensor parallelism

Tensor parallelism shards the weights of each model layer across multiple GPUs to reduce memory pressure and increase throughput. This technique is specifically intended for large models with massive layers, such as autoregressive Large Language Models (LLMs) and Diffusion Transformers (DiTs).

For multi-stage models, the best approach is typically using stage configurations to distribute different stages across different physical devices. However, you can also combine these strategies: if a multi-stage model (such as Qwen3-Omni) contains an exceptionally large individual stage, you can still apply tensor parallelism within that specific stage while allocating the remaining, smaller stages to separate devices.

For detailed configuration steps and syntax, refer to the upstream documentation for Content from docs.vllm.ai is not included.tensor parallelism and Content from docs.vllm.ai is not included.stage configurations.

Model CPU offload

CPU offload is a serving configuration that stores model weights in system memory, only loading them into GPU VRAM as they are needed for a model forward pass. This trades server performance for GPU memory pressure, allowing GPUs to serve models that are larger than their available VRAM.

This feature is strictly supported for diffusion workloads such as DiT models. It cannot be used with multi-stage Autoregressive (AR) pipelines such as Qwen3-Omni or Qwen3-TTS.

Cache-DiT

Cache-DiT is an inference optimization algorithm for diffusion pipelines that skips certain low-impact computations to trade output quality for throughput.

For more fine-grained configuration of Cache-DiT, refer to the Content from docs.vllm.ai is not included.upstream documentation.

Prometheus metrics

Prometheus metrics are signals a server provides about its own performance and load to outside observers for autoscaling and monitoring purposes.

For more metrics configuration, refer to the Content from docs.vllm.ai is not included.upstream documentation.

CFG parallel

With Classifier-Free Guidance (CFG) Parallel, you can distribute the forward passes through the diffusion transformer for standard CFG, such as positive versus negative or empty prompts, across multiple GPUs. This is a diffusion-only feature.

For more information, refer to the Content from docs.vllm.ai is not included.upstream documentation.

Important

Red Hat AI Omni Inference Container is a Developer Preview feature only. Developer Preview features are not supported by Red Hat in any way and are not functionally complete or production-ready. Do not use Developer Preview features for production or business-critical workloads. Developer Preview features provide early access to upcoming product features in advance of their possible inclusion in a Red Hat product offering, enabling customers to test functionality and provide feedback during the development process. These features might not have any documentation, are subject to change or removal at any time, and testing is limited. Red Hat might provide ways to submit feedback on Developer Preview features without an associated SLA.

3.4. Resolved issues

  • Structured output generation on IBM Z with llguidance backend now works correctly.

    Previously, when using the llguidance structured decoding backend on IBM Z (s390x), JSON Schema-constrained generation produced invalid output or became stuck generating whitespace indefinitely. This issue is now resolved.

  • Sarvam-105B model now loads successfully.

    Previously, the RedHatAI/sarvam-105b-FP8-Dynamic model failed to load due to a RoPE validation error caused by a Transformers v5 incompatibility. This issue is now resolved.

3.5. Known issues

  • Prithvi TerraTorch model warmup fails on arm64 GH200 due to tensor size limit.

    When deploying the ibm-nasa-geospatial/Prithvi-EO-2.0-300M-TL-Sen1Floods11 model on arm64 NVIDIA GH200 accelerators, the vLLM engine core fails during warmup with the error "upsample_bilinear2d_nhwc only supports output tensors with less than INT_MAX elements". A PyTorch CUDA kernel limitation on arm64 causes this issue when the TerraTorch UPerNet decoder warmup tensor exceeds the signed 32-bit integer maximum.

    To work around this issue, deploy the model with limited concurrency:

    --max-num-seqs=8 --max-num-batched-tokens=8

    This configuration does not affect performance for geospatial models because each request uses only one token.

  • DeepSeek-V4-Flash-NVFP4-FP8 model crashes during initialization.

    The RedHatAI/DeepSeek-V4-Flash-NVFP4-FP8 quantized model fails to load with a KeyError for scale_fmt in the quantization configuration. The DeepseekV4Attention initialization expects a scale_fmt key that is not present in the model configuration.

  • Mistral Small 3.1 tool calling returns no tool calls with tool_choice=auto.

    When using the Mistral Small 3.1 model with tool calling and tool_choice=auto, the model does not return tool calls in the response.

  • Qwen2.5-VL FP8 tool calling fails because the model does not support tools.

    The Qwen2.5-VL FP8 model fails tool calling smoke tests because the model architecture does not support tool calling functionality.

  • Mistral Small FP8-dynamic fails to start due to missing backend attribute.

    The Mistral Small FP8-dynamic model fails to start with an error indicating that CachedMistralCommonBackend is missing the is_fast attribute.

  • Gemma 4 12B model evaluation crashes due to batch token limit.

    When running LM Evaluation Harness on the Gemma 4 12B model, the evaluation crashes with an error indicating that max_num_batched_tokens is too small for the prefix-LM multimodal model.

    To work around this issue, explicitly set --max-num-batched-tokens to any value greater than 2496:

    --max-num-batched-tokens 4096
  • Granite 4.0-h-small model crashes on first inference with ROCm.

    When deploying the ibm-granite/granite-4.0-h-small model on AMD ROCm accelerators, the vLLM server crashes during the first inference request with a RuntimeError: PassManager::run failed error. This occurs because the Triton JIT compiler fails to compile Mamba chunk_scan kernels on the first run. After the pod restarts, the model works correctly due to the warm compilation cache.

  • Qwen 3.5 and 3.6 models fail on CPU deployments.

    Qwen 3.5 and 3.6 models fail to run correctly on CPU-only deployments due to an upstream vLLM issue with GDN attention operations.

  • Intel Gaudi deployments fail due to habana-torch-plugin version rejection.

    When deploying models on Intel Gaudi accelerators, the vllm-gaudi configuration validation rejects the habana-torch-plugin version 1.23.0.post1 because it does not conform to PEP 440 versioning requirements.

  • Prefix caching with models requiring transformers 5.x crashes the inference scheduler.

    Deploying models whose architecture was introduced in transformers 5.0 or later with prefix caching enabled (precise-prefix-cache-scorer) causes the inference scheduler to crash. The tokenizer sidecar (odh-llm-d-kv-cache-rhel9) ships transformers 4.57.6, which does not recognize architecture types added in transformers 5.x. Affected models include Gemma 4, GLM-5, Qwen3.5 MoE, and others added after the 4.x series.

    To work around this issue, disable precise-prefix-cache-scorer in the EndpointPickerConfig when using these models.

    This issue is fixed in 3.5 stable. The UDS tokenizer sidecar is replaced by a vLLM render sidecar that stays in sync with the serving image’s transformers version.

Chapter 4. Version 3.5.0-ea.1 release notes

Red Hat AI Inference 3.5.0-ea.1 provides container images that optimize inferencing with large language models (LLMs) for NVIDIA CUDA, AMD ROCm, Google TPU, Intel Gaudi, and IBM Spyre AI accelerators with multi-architecture support for s390x (IBM Z) and ppc64le (IBM Power).

Important

Red Hat AI Inference 3.5.0-ea.1 is an Early Access release. Early Access releases are not supported by Red Hat in any way and are not functionally complete or production-ready. Do not use Early Access releases for production or business-critical workloads. Use Early Access releases to test upcoming product features in advance of their possible inclusion in a Red Hat product offering, and to test functionality and provide feedback during the development process. These features might not have any documentation, are subject to change or removal at any time, and testing is limited. Red Hat might provide ways to submit feedback on Early Access features without an associated SLA.

The following container images are available as early access releases from Content from registry.redhat.io is not included.registry.redhat.io:

  • registry.redhat.io/rhaiis/vllm-cuda-rhel9:3.5.0-ea.1
  • registry.redhat.io/rhaiis/vllm-rocm-rhel9:3.5.0-ea.1
  • registry.redhat.io/rhaiis/vllm-spyre-rhel9:3.5.0-ea.1-1781067361 (s390x, ppc64le, x86_64)
  • registry.redhat.io/rhaiis/vllm-spyre-rhel9:3.5.0-ea.1-1780065632 (s390x, ppc64le, x86_64) — for Red Hat OpenShift AI compatibility
  • registry.redhat.io/rhaiis/model-opt-cuda-rhel9:3.5.0-ea.1
  • registry.redhat.io/rhaiis/vllm-cpu-rhel9:3.5.0-ea.1

The following container images are Technology Preview features:

  • registry.redhat.io/rhaiis/vllm-tpu-rhel9:3.5.0-ea.1
  • registry.redhat.io/rhaiis/vllm-neuron-rhel9:3.5.0-ea.1
  • registry.redhat.io/rhaiis/vllm-gaudi-rhel9:3.5.0-ea.1
Important

Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.

The Red Hat AI Inference supported product and hardware configurations have been expanded. For more information, see Supported product and hardware configurations.

Note

The following Technology Preview container images bundle different upstream vLLM versions:

  • vllm-tpu-rhel9:3.5.0-ea.1 bundles vLLM v0.13.0.
  • vllm-neuron-rhel9:3.5.0-ea.1 bundles vLLM v0.16.0.

4.1. New Red Hat AI Inference developer features

Red Hat AI Inference 3.5.0-ea.1 packages the upstream vLLM v0.19.1 release. You can review the complete list of updates in the upstream Content from github.com is not included.vLLM v0.19.1 release notes.

Gemma 4 model support

Added support for the RedHatAI/gemma-4-26B-IT and RedHatAI/gemma-4-12B-IT models.

To use custom tool calling, add the template from the upstream vLLM repository or use the chat template from the Hugging Face model repository. The custom tool-calling template is not included in the container image.

New model support
Added support for Mistral-small-3.2-24B-instruct-2506, multilingual-e5-large, multilingual-e5-large-instruct, and granite-4-8b-dense model architectures.
Custom weights support for Llama 3.1
Added support for Llama-3.1-8b-instruct, including fine-tuned models and custom weights.
IBM Z supported models

Added support for the following models on IBM Z (s390x) architecture:

  • ibm-granite/granite-3.3-8b-instruct
  • ibm-granite/granite-3.3-8b-instruct-FP8
  • ibm-granite/granite-4.1-8b
  • ibm-granite/granite-4.1-8b-fp8
  • mistralai/Ministral-3-14B-Instruct-2512-BF16
Model support matrix

This release adds a comprehensive model support matrix to the documentation. Validated models are benchmarked with GuideLLM and LM Evaluation Harness. Enabled models are architecturally supported, but not yet through the full validation pipeline. The matrix lists supported models detailing the following information:

  • Validation status
  • Minimum Red Hat AI Inference platform
  • Minimum Red Hat OpenShift AI version
  • vLLM version
  • ModelCar container image registry paths
  • GPU requirements, including minimum vRAM and supported GPU configurations

For more information, see Validated models.

Speculators library update (Technology Preview)
Updated the Speculators library to version 0.5.0a0.

4.2. New Red Hat AI Model Optimization Toolkit developer features

Red Hat AI Model Optimization Toolkit 3.5.0-ea.1 packages the upstream LLM Compressor v0.10.0.2 release. You can review the complete list of updates in the upstream Content from github.com is not included.LLM Compressor v0.10.0.2 release notes.

4.3. Known issues

  • AMD ROCm deployments on MI300X encounter memory access faults during CUDA graph capture.

    When running models such as meta-llama/Llama-3.2-1B-Instruct or ibm-granite/granite-3.2-2b-instruct on AMD MI300X accelerators, GPU memory access faults occur with the error "Memory access fault by GPU node-2". This issue is caused by an incompatibility between vLLM CUDA Graph FULL mode and MI300X VF memory behavior under ROCm.

    To work around this issue, set cudagraph_mode=PIECEWISE in your vLLM configuration:

    --compilation-config '{"cudagraph_mode":"PIECEWISE"}'
  • Phi-4 Vision model fails to load with SigLIP2 compatibility error.

    The RedHatAI/Phi-4-reasoning-vision-15B model requires a filter_out_non_signature_kwargs() function that is missing from the transformers library bundled with vLLM. The vLLM API server crashes at startup and cannot serve the model.

  • Sarvam-105B model fails to load with RoPE validation error.

    The RedHatAI/sarvam-105b-FP8-Dynamic model configuration calls validate_rope(ignore_keys=…​), but the ignore_keys parameter was removed in Transformers v5. The vLLM API server crashes during model initialization.

  • AMD Zen CPU deployments crash due to zentorch plugin incompatibility.

    The zentorch vLLM plugin supports vLLM versions 0.15.0 through 0.18.0, but Red Hat AI Inference 3.5.0-ea.1 ships vLLM 0.19.1. The engine crashes during model loading with a segfault.

    To work around this issue, unset the VLLM_PLUGINS environment variable:

    unset VLLM_PLUGINS
  • Structured output generation fails on IBM Z when using the llguidance backend.

    When using the llguidance structured decoding backend on IBM Z (s390x), JSON Schema-constrained generation may produce invalid output or become stuck generating whitespace indefinitely.

  • Gemma 4 12B model deployment might fail due to unsupported gemma4_unified architecture in the bundled Transformers version.

    Gemma 4 12B models use the gemma4_unified architecture, which is not supported by the version of Transformers included in the Red Hat AI Inference container image. Deployment of the google/gemma-4-12B-it model fails during vLLM initialization with the error "The checkpoint you are trying to load has model type gemma4_unified but Transformers does not recognize this architecture." Other Gemma 4 variants deploy successfully because they use different model architectures that are already supported.

Chapter 5. Asynchronous errata updates

Security, bug fix, and enhancement updates for Red Hat AI Inference are released as asynchronous errata through the Red Hat Network. All Red Hat AI Inference errata are available on the Red Hat Customer Portal. See the This content is not included.Red Hat AI Inference Life Cycle for more information about asynchronous errata.

You can enable errata notifications in your Red Hat Customer Portal account settings.

Note

You must register your hosts and configure them for consuming Red Hat Customer Portal AI Inference entitlements for the errata notification emails to be generated.

Legal Notice

Copyright © Red Hat.
Except as otherwise noted below, the text of and illustrations in this documentation are licensed by Red Hat under the Creative Commons Attribution–Share Alike 3.0 Unported license . If you distribute this document or an adaptation of it, you must provide the URL for the original version.
Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law.
Red Hat, the Red Hat logo, JBoss, Hibernate, and RHCE are trademarks or registered trademarks of Red Hat, LLC. or its subsidiaries in the United States and other countries.
Linux® is the registered trademark of Linus Torvalds in the United States and other countries.
XFS is a trademark or registered trademark of Hewlett Packard Enterprise Development LP or its subsidiaries in the United States and other countries.
The OpenStack® Word Mark and OpenStack logo are trademarks or registered trademarks of the Linux Foundation, used under license.
All other trademarks are the property of their respective owners.