NVIDIA fixes 2 vulnerabilities in NVIDIA Container Toolkit and GPU Operator

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] NVIDIA fixes 2 vulnerabilities in NVIDIA Container Toolkit and GPU Operator

NVIDIA fixes 2 vulnerabilities in NVIDIA Container Toolkit version 1.17.8 and GPU Operator version 25.3.1. If an update is not possible, the impact of the vulnerability can be mitigated by disabling the 'enable-cuda-compat' hook [1].

NVIDIA Container Toolkit and GPU Operator - privileges escalation, data tampering, information disclosure, DoS (CVE-2025-23266)

CVSS 9.0 (Critical)

An authenticated attacker on the local network is, due to a vulnerability in certain functions used to initialize a container in NVIDIA Container Toolkit, allowed to execute arbitrary code with elevated privileges. This may result in privilege escalation, data tampering, information disclosure or denial of service [1].

The vulnerability is present in products:

NVIDIA Container Toolkit; <1.17.8
NVIDIA GPU Operator; <25.3.1

CVSS: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

CVE-2025-23266 at cve.org, NVD
CWE-426: Untrusted Search Path at cwe.mitre.org

The vulnerability was publicly disclosed 13. 7. 2025.

NVIDIA Container Toolkit and GPU Operator - data tampering, DoS (CVE-2025-23267)

CVSS 8.5 (High)

An authenticated remote attacker is, due to a vulnerability in the 'update-ldcache' hook in NVIDIA Container Toolkit, allowed to exploit symbolic link following using a specially crafted container image, which may lead to data tampering and denial of service [1].

The vulnerability is present in products:

NVIDIA Container Toolkit; <1.17.8
NVIDIA GPU Operator; <25.3.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

More information:

CVE-2025-23267 at cve.org, NVD
CWE-59: Improper Link Resolution Before File Access ('Link Following') at cwe.mitre.org

The vulnerability was publicly disclosed 13. 7. 2025.

Report feedback

[TLP:CLEAR] NVIDIA fixes 2 vulnerabilities in NVIDIA Container Toolkit and GPU Operator

NVIDIA Container Toolkit and GPU Operator - privileges escalation, data tampering, information disclosure, DoS (CVE-2025-23266)

CVSS 9.0 (Critical)

NVIDIA Container Toolkit and GPU Operator - data tampering, DoS (CVE-2025-23267)

CVSS 8.5 (High)

Links