UnlearningSoup: Is Repeated Tuning Necessary for Large Language Model Unlearning?
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models trained on vast corpora inherently risk memorizing harmful content that may later re-emerge in their outputs. To mitigate this issue, existing unlearning methods typically rely on training-based parameter updates, such as gradient ascent and its variants, to delete targeted content while preserving other knowledge. However, balancing the competing goals of forgetting and retention makes hyperparameter choices for these methods particularly difficult, often requiring repeated tuning to obtain a strong model that still leaves substantial room for improvement and transfers poorly across models and datasets. To address this challenge, we investigate whether unlearning runs exhibit exploitable structure in weight space, and observe that models from different runs still lie in a shared evaluation-performance basin. This suggests that stronger models may be recovered through an unlearning-tailored soup strategy, reducing the need for repeated tuning for further improvement or new settings. Motivated by this, we propose UnlearningSoup, a unified framework that provides two strategies: EfficientSoup uses binary-search-based interpolation to quickly discover a well-performing model in the early stage, where repeated tuning would otherwise make strong model selection costly. PerformanceSoup uses reweighted souping to efficiently unlock the remaining performance potential in the later stage, where repeated tuning becomes increasingly inefficient. Extensive experiments across diverse datasets and models show that UnlearningSoup delivers 2.4x to 3.3x efficiency gains in hyperparameter selection, while consistently improving performance across settings.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 53 of its 68 references that are in the map. First posted on arXiv 29 Sep 2026.
Builds on
53 of 68 references.
Closest ancestors · 32
Same direction, newest first
- 2026Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearning16 May
- 2026Explainable LLM Unlearning Through Reasoning8 Feb
- 2026Per-parameter Task Arithmetic for Unlearning in Large Language Models29 Jan
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov
- 2025LLM Unlearning with LLM Beliefs22 Oct
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearning6 Oct
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks14 Apr
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025LLM Unlearning via Neural Activation Redirection11 Feb
20 more
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024NegMerge: Sign-Consensual Weight Merging for Machine Unlearning8 Oct
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods13 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
Other references · 21
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,366
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
9 more
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 367
- 2023Gender bias and stereotypes in Large Language Modelscited by 185
- 2023Copyright Violations and Large Language Modelscited by 108
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2025The European Union general data protection regulation: what it is and what it meanscited by 30
- 2025On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignmentcited by 12
- 2025Can Prompts Rewind Time for LLMs? Evaluating the Effectiveness of Prompted Knowledge Cutoffscited by 8
Built on by
Not cited yet.