Andres Riancho

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit versions up to and including 1.17.3 NVIDIA GPU Operator versions up to and including 24.9.1 **Description** NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use (TOCTOU) vulnerability. This flaw can allow a crafted container image to gain access to the host file system, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. A bypass was discovered for a previously patched security flaw, reflagged as CVE-2025-23359. The vulnerability exists due to errors in synchronization when using a shared resource, creating a race condition. **Recommendations** NVIDIA Container Toolkit versions up to and including 1.17.3: Upgrade to a newer version to address the vulnerability. NVIDIA GPU Operator versions up to and including 24.9.1: Upgrade to a newer version to address the vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit versions are affected, but specific versions are not provided in the input data. **Description** The issue is related to an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The "GET /api/v1/status/{job id}" and "POST /api/v1/search" API endpoints are mentioned, with the `job id` variable and `Content-Type` being relevant. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** Since specific affected versions of NVIDIA Container Toolkit are not provided, a general recommendation based on the available data is to apply the latest security update released by NVIDIA for its Container Toolkit and GPU Operator to address the critical vulnerabilities.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit (affected versions not specified) **Description** The NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This issue is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit (affected versions not specified) **Description** The NVIDIA Container Toolkit contains an improper isolation vulnerability. A specially crafted container image could lead to untrusted code running in the host’s network namespace. This issue is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit may lead to denial of service and escalation of privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit versions prior to the fixed version NVIDIA GPU Operator versions prior to the fixed version **Description** The issue is related to errors in processing symbolic links, which can be exploited by a remote attacker to impact data integrity. A specially crafted container image can lead to the creation of unauthorized files on the host, although the name and location of these files cannot be controlled by the attacker. This might result in data tampering. **Recommendations** For NVIDIA Container Toolkit versions prior to the fixed version, update to the latest version as outlined in the remediation guide. For NVIDIA GPU Operator versions prior to the fixed version, update to the latest version as outlined in the remediation guide. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available. Review security configurations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit versions 1.16.1 or earlier **Description** The issue is related to the default mode of operation in NVIDIA Container Toolkit, allowing a specially crafted container image to create empty files on the host file system. This vulnerability does not impact use cases where CDI is used. A successful exploit may lead to data tampering. The vulnerability is also associated with a null pointer dereference due to concurrent access to a resource, potentially allowing a remote attacker to modify arbitrary data by using a specially crafted container image. **Recommendations** For NVIDIA Container Toolkit versions 1.16.1 or earlier, consider updating to a version that contains a fix for this issue, as no specific workaround is provided in the given information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TippingPoint IPS versions prior to 2.2.4.6519 **Description** The issue allows remote attackers to cause a denial of service, resulting in a page fault, by sending a malformed packet, which can force the device into layer 2 fallback. **Recommendations** For versions prior to 2.2.4.6519, update to version 2.2.4.6519 or later to resolve the issue.