A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
History

Wed, 28 Jan 2026 17:30:00 +0000

Type Values Removed Values Added
Description A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-01-28T17:13:31.000Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65891

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-28T18:16:50.067

Modified: 2026-01-28T18:16:50.067

Link: CVE-2025-65891

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.