Description
svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-scikit-learn | 1.6.1-1.1 | openSUSE-SU-2025:14729-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | scikit-learn | >= 0.23.2, < 1.0.1 | 1.0.1 | GHSA-jxfp-4rvq-9h9m |
| PyPI | scikit-learn | < 0.24.dev0 | 0.24.dev0 | PYSEC-2020-108 |
Advisories 2
- openSUSE-SU-2025:14729-1 python311-scikit-learn-1.6.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- NCSC-2025-0028 Kwetsbaarheden verholpen in Oracle Analytics NCSC-NL (Netherlands) · Jan 22, 2025
References
- https://github.com/scikit-learn/scikit-learn/issues/18891
- https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501
- 20201130 scikit-learn 0.23.2 Local Denial of Service mailing-list
- http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html
- https://github.com/scikit-learn/scikit-learn/commit/1bf13d567d3cd74854aa8343fd25b61dd768bb85
- GLSA-202301-03 vendor-advisory