An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
Date: 2025-09
Affected: linuxfoundation/pytorch
Attack vector: dos
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2025-55551
CVE-2025-55552
CVE-2025-55553
CVE-2025-55554
CVE-2025-55556
CVE-2025-55557
CVE-2025-55558
CVE-2025-55559
CVE-2025-55560
CWE: CWE-190
CWE-248
CWE-400
CWE-506
CWE-682
CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.


Mitigations:

Architectural layers (MAESTRO):