PyTorch Syntax Error in Proxy Tensor Component Leading to Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in PyTorch version 2.7.0, specifically within the 'proxy_tensor.py' component. The issue arises from a syntax error when the 'torch.Tensor.random_()' method is used, particularly in conjunction with the PyTorch compiler, Inductor. This error can cause a system crash, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a syntax error that disrupts normal operations, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by compiling a PyTorch model that includes the 'torch.Tensor.random_()' method using the Inductor backend. This will trigger a syntax error in the 'proxy_tensor.py' file, causing the model compilation to fail.

Remediation

This vulnerability has been fixed in the latest version of PyTorch. Users should update to the patched version.