cve-2025-55554

CVE-2025-55554 is an integer overflow vulnerability in PyTorch 2.8.0, specifically in the torch.nan_to_num function's long code path. Microsoft has attested that Azure Linux includes the impacted open-source library, but this attestation is an inventory statement and does not guarantee that no other Microsoft product or image contains the vulnerable PyTorch binary. Discussions on WindowsForum cover the background of the CVE, its impact on Azure Linux, and mitigation strategies. The tag is relevant for users tracking this specific security flaw, its implications for Microsoft's cloud infrastructure, and steps to address the vulnerability.