PyTorch Denial-of-Service Vulnerability in torch.linalg.lu Component

A denial-of-service vulnerability has been identified in PyTorch version 2.8.0 within the torch.linalg.lu component. This issue arises when performing slice operations, which the function does not handle properly, leading to errors and potential application crashes. The vulnerability was reported by a community member and is considered high priority.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the application crashes or becomes unresponsive.

Reproduction

The vulnerability can be reproduced by compiling a PyTorch model that uses the torch.linalg.lu function with the Inductor compiler, and attempting to perform a slice operation on the output. This will result in a TypeError, indicating that the function cannot process the slice as expected.