Skip to main content

Improper Resource Shutdown or Release

CVE-2025-4287

Medium
4.8/10

Summary

A vulnerability was found in pytorch versions 0.1.5 and after. It has been rated as problematic. Affected by this issue is the function `reduce` of the file `torch/cuda/nccl.py`. The manipulation leads to Denial of Service (DoS). It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5 in this "Divigroup-RAP/PYTORCH" forked repository

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • LOW

CWE-404 - Improper Resource Shutdown or Release

The program does not release or incorrectly releases a resource before it is made available for re-use.

References

Advisory Timeline

  • Published