CVE-2025-55551: High severity PyTorch PyTorch vulnerability
Published Sep 25, 2025
·Updated
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
Affected Software
6 affected components
PyTorch PyTorch
linuxfoundation Pytorch Python<=2.8.0
Microsoft cbl2 pytorch 2.0.0-9
Microsoft azl3 pytorch 2.2.2-7
Microsoft cbl2 pytorch 2.0.0-11
Microsoft azl3 pytorch 2.2.2-9
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Oct 5, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:01 AM
Affected Software
Updated
via Microsoft·01:01 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-55551?
CVE-2025-55551 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2025-55551?
To address CVE-2025-55551, upgrade PyTorch to version 2.8.1 or later.
3
What component is affected by CVE-2025-55551?
CVE-2025-55551 affects the torch.linalg.lu component of PyTorch.
4
What action can trigger CVE-2025-55551?
CVE-2025-55551 can be triggered by performing a slice operation.
5
Which version of PyTorch is vulnerable to CVE-2025-55551?
PyTorch version 2.8.0 is vulnerable to CVE-2025-55551.