A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function
    torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally.
    The exploit has been disclosed to the public and may be used. (CVE-2025-3001)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function     torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally.
    The exploit has been disclosed to the public and may be used. (CVE-2025-3001)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
443056	SCA: security update for torch (GHSA-qfhq-4f3w-5fph)	Tenable Cloud Security	SCA Checks	medium
443056	SCA: security update for torch (GHSA-qfhq-4f3w-5fph)	Tenable Self-Hosted Container Security	SCA Checks	medium
258421	Linux Distros Unpatched Vulnerability : CVE-2025-3001	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-3001

medium

Tenable Plugins

medium

medium

medium