CVE-2025-55557: High severity PyTorch PyTorch vulnerability
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.12.0+dfsg2-1 - Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.14.1+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55557?
CVE-2025-55557 is classified as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2025-55557?
To mitigate CVE-2025-55557, update to a patched version of PyTorch that resolves the issue with torch.cummin in the Inductor compilation.
Which versions of PyTorch are affected by CVE-2025-55557?
CVE-2025-55557 affects PyTorch version 2.7.0.
What causes the vulnerability CVE-2025-55557?
The vulnerability occurs due to a Name Error in PyTorch models containing torch.cummin when compiled by Inductor.
What impact does CVE-2025-55557 have on systems using PyTorch?
The impact of CVE-2025-55557 can lead to a Denial of Service (DoS), affecting the availability of applications using the vulnerable PyTorch version.