Label Smoothing Improves Gradient Ascent in LLM Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
LLM unlearning has emerged as a promising approach, aiming to enable models to forget hazardous/undesired knowledge at low cost while preserving as much model utility as possible. Among existing techniques, the most straightforward method is performing Gradient Ascent (GA) w.r.t. the forget data, thereby forcing the model to unlearn the forget dataset. However, GA suffers from severe instability, as it drives updates in a divergent direction, often resulting in drastically degraded model utility. To address this issue, we propose Smoothed Gradient Ascent (SGA). SGA combines the forget data with multiple constructed normal data through a tunable smoothing rate. Intuitively, this extends GA from learning solely on the forget data to jointly learning across both forget and normal data, enabling more stable unlearning while better preserving model utility. Theoretically, we provide the theoretical guidance on the selection of the optimal smoothing rate. Empirically, we evaluate SGA on three benchmarks: TOFU, Harry Potter, and MUSE-NEWS. Experimental results demonstrate that SGA consistently outperforms the original Gradient Ascent (GA) method across all metrics and achieves top-2 performance among all baseline methods on several key metrics.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 55 of its 72 references that are in the map. First posted on arXiv 25 Oct 2025.
Builds on
55 of 72 references.
Closest ancestors · 20
Same direction, newest first
- 2025RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimality8 Jun
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024Adversarial Machine Unlearning11 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
8 more
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2022Continual Learning and Private Unlearning24 Mar
Other references · 35
- 2023GPT-4 Technical Reportcited by 18,396
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
23 more
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2022Large Language Models Encode Clinical Knowledgecited by 1,830
- 2019Machine Unlearningcited by 1,061
- 2023Large Language Modelscited by 780
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 565
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2024NaturalSpeech 3: Zero-Shot Speech Synthesis with Factorized Codec and Diffusion Modelscited by 226
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2020Does label smoothing mitigate label noise?cited by 204
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 186
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
- 2024MaskGCT: Zero-Shot Text-to-Speech with Masked Generative Codec Transformercited by 161
- 2023Copyright Violations and Large Language Modelscited by 108
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labelscited by 70
- 2025Token Cleaning: Fine-Grained Data Selection for LLM Supervised Fine-Tuningcited by 39
- 2025Recognition through Reasoning: Reinforcing Image Geo-localization with Large Vision-Language Modelscited by 28
- 2023How to Protect Copyright Data in Optimization of Large Language Models?cited by 26
- 2025MathAgent: Leveraging a Mixture-of-Math-Agent Framework for Real-World Multimodal Mathematical Error Detectioncited by 24
- 2025TaDiCodec: Text-aware Diffusion Speech Tokenizer for Speech Language Modelingcited by 13
- 2024Harnessing Business and Media Insights with Large Language Modelscited by 7
- 2025Better Reasoning with Less Data: Enhancing VLMs Through Unified Modality Scoringcited by 6
- 2025SelectMix: Enhancing Label Noise Robustness through Targeted Sample Mixingcited by 5
- 2025Evaluating LLM-Contaminated Crowdsourcing Data Without Ground Truthcited by 2
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Label Smoothing Improves Machine Unlearning
- 2025Recover-to-Forget: Gradient Reconstruction from LoRA for Efficient LLM Unlearning
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction
- 2024Multi-Objective Large Language Model Unlearning
- 2025Provable Unlearning with Gradient Ascent on Two-Layer ReLU Neural Networks
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
- 2026De-attribute to Forget for LLM Unlearning
- 2026CALIBURN: Self-Calibrated LLM Unlearning Alignment