CVE-2025-55551: High severity PyTorch PyTorch vulnerability
Published Sep 25, 2025
·Updated
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
Affected Software
12 affected componentsFixes available
PyTorch PyTorch
IBM Concert Software<=1.0.0-3.0.0
Microsoft azl3 pytorch 2.2.2-7
Microsoft azl3 pytorch 2.2.2-10
Microsoft cbl2 pytorch 2.0.0-9
Microsoft cbl2 pytorch 2.0.0-11
Microsoft azl3 pytorch 2.2.2-9
linuxfoundation Pytorch Python<=2.8.0
debian/pytorch*
debian/pytorch*
debian/pytorch<2.12.0+dfsg2-1
2.12.0+dfsg2-1
debian/pytorch<=1.13.1+dfsg-4, <=2.6.0+dfsg-7
2.14.1+dfsg-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.12.0+dfsg2-1 - Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.14.1+dfsg-1
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·03:16 PM
Affected Software
Oct 5, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Sep 22, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55551?
CVE-2025-55551 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2025-55551?
To address CVE-2025-55551, upgrade PyTorch to version 2.8.1 or later.
3
What component is affected by CVE-2025-55551?
CVE-2025-55551 affects the torch.linalg.lu component of PyTorch.
4
What action can trigger CVE-2025-55551?
CVE-2025-55551 can be triggered by performing a slice operation.
5
Which version of PyTorch is vulnerable to CVE-2025-55551?
PyTorch version 2.8.0 is vulnerable to CVE-2025-55551.