A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function
    torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally.
    The exploit has been disclosed to the public and may be used. (CVE-2025-3001)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function     torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally.
    The exploit has been disclosed to the public and may be used. (CVE-2025-3001)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
462807	Echo: pytorch: security update to 2.12.0+dfsg2-1torch: security update to 2.10.0	Tenable Cloud Security	Echo Local Security Checks	Local	medium
462807	Echo: pytorch: security update to 2.12.0+dfsg2-1torch: security update to 2.10.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
443056	SCA: security update for torch (GHSA-qfhq-4f3w-5fph)	Tenable Cloud Security	SCA Checks	Local	medium
443056	SCA: security update for torch (GHSA-qfhq-4f3w-5fph)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
258421	Linux Distros Unpatched Vulnerability : CVE-2025-3001	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-3001

medium

Tenable Plugins

medium

medium

medium

medium

medium