An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. (CVE-2025-55551)
A vulnerability in the torch.linalg.lu component of PyTorch version 2.8.0 and certain other versions allows attackers to cause a Denial of Service (DoS) by exploiting a slice operation. This issue affects specific versions of PyTorch and has been assigned CVE-2025-55551. A patch is available to address this vulnerability.
AI Analysis
Technical Summary
CVE-2025-55551 is a high-severity vulnerability in the torch.linalg.lu component of PyTorch, specifically affecting version 2.8.0 and other versions including =2.0 and =3.0 as well as all versions prior to 2.9.0. The flaw allows an attacker to cause a Denial of Service (DoS) condition when performing a slice operation. The vulnerability has been identified and documented by the Microsoft Security Response Center. There is no CVSS score provided, but the severity is classified as high. A patch is available to remediate this issue.
Potential Impact
Exploitation of this vulnerability results in a Denial of Service condition, potentially disrupting applications or services that rely on the affected PyTorch versions. There is no indication of code execution or data breach from the provided information.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fix from the PyTorch maintainers or the Microsoft Security Response Center advisory to remediate the issue. Since this is not a cloud service, remediation depends on user action to update affected software versions.
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. (CVE-2025-55551)
Description
A vulnerability in the torch.linalg.lu component of PyTorch version 2.8.0 and certain other versions allows attackers to cause a Denial of Service (DoS) by exploiting a slice operation. This issue affects specific versions of PyTorch and has been assigned CVE-2025-55551. A patch is available to address this vulnerability.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-55551 is a high-severity vulnerability in the torch.linalg.lu component of PyTorch, specifically affecting version 2.8.0 and other versions including =2.0 and =3.0 as well as all versions prior to 2.9.0. The flaw allows an attacker to cause a Denial of Service (DoS) condition when performing a slice operation. The vulnerability has been identified and documented by the Microsoft Security Response Center. There is no CVSS score provided, but the severity is classified as high. A patch is available to remediate this issue.
Potential Impact
Exploitation of this vulnerability results in a Denial of Service condition, potentially disrupting applications or services that rely on the affected PyTorch versions. There is no indication of code execution or data breach from the provided information.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fix from the PyTorch maintainers or the Microsoft Security Response Center advisory to remediate the issue. Since this is not a cloud service, remediation depends on user action to update affected software versions.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2025-55551
- Cve Count
- 1
Threat ID: 6a209847e29bf47b50ebeaea
Added to database: 06/03/2026, 21:10:31 UTC
Last enriched: 09/08/2026, 15:11:54 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.