mlsanityData to 14 Oct 2026

Probing Knowledge Holes in Unlearned LLMs

arXiv 2511.00030 ↗First posted 27 Oct 2025cs.LG cs.AIcited by 4

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning has emerged as a prevalent technical solution for selectively removing unwanted knowledge absorbed during pre-training, without requiring full retraining. While recent unlearning techniques can effectively remove undesirable content without severely compromising performance on standard benchmarks, we find that they may inadvertently create ``knowledge holes'' -- unintended losses of benign knowledge that standard benchmarks fail to capture. To probe where unlearned models reveal knowledge holes, we propose a test case generation framework that explores both immediate neighbors of unlearned content and broader areas of potential failures. Our evaluation demonstrates significant hidden costs of unlearning: up to 98.7% of the test cases yield irrelevant or nonsensical responses from unlearned models, despite being answerable by the pretrained model. These findings necessitate rethinking the conventional approach to evaluating knowledge preservation in unlearning, moving beyond standard, static benchmarks.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 26 of its 32 references that are in the map. First posted on arXiv 27 Oct 2025.

Builds on

26 of 32 references.

Closest ancestors · 6

Same direction, newest first

  1. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  2. 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
  3. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  4. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  5. 2023Large Language Model Unlearning14 Oct
  6. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct

Other references · 20

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  6. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
  7. 2023Mistral 7Bcited by 3,164
  8. 2016Pointer Sentinel Mixture Modelscited by 3,096
  9. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  10. 2022Red Teaming Language Models with Language Modelscited by 1,026
  11. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  12. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
8 more
  1. 2023Zephyr: Direct Distillation of LM Alignmentcited by 506
  2. 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 491
  3. 2022The Vendi Score: A Diversity Evaluation Metric for Machine Learningcited by 311
  4. 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Promptscited by 205
  5. 2020Augmented SBERT: Data Augmentation Method for Improving Bi-Encoders for Pairwise Sentence Scoring Taskscited by 138
  6. 2024Curiosity-driven Red-teaming for Large Language Modelscited by 88
  7. 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
  8. 2024FASTTRACK: Fast and Accurate Fact Tracing for LLMscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 3.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness
  2. 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning
  3. 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation
  4. 2025Learning-Time Encoding Shapes Unlearning in LLMs
  5. 2026Forget Narrowly, Retain Broadly: Unlearning as an Asymmetric Generalization Problem
  6. 2024Catastrophic Failure of LLM Unlearning via Quantization
  7. 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods
  8. 2025Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods