Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack though incorrect handling of the OCI hook createContainer during container initialization when update-ldcache is used. An attacker can modify data or disrupt service by supplying a specially crafted container image that...

CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2025-23267

The CVE-2025-23267 entry concerns the NVIDIA Container Toolkit. A vulnerability in the update-ldcache hook could allow an attacker to cause data tampering and a denial of service via specially crafted container images. Public advisories in connected docs show fixed versions: SUSE notes a fix in t...

CVE-2025-23266

CVE-2025-23266 affects NVIDIA Container Toolkit (nvidia-container-toolkit) for all platforms, due to a Privilege Escalation in hooks used to initialize the container. Exploitation could lead to elevated privileges, data tampering, information disclosure, and DoS. Public advisories (e.g., CBLMARIN...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...

CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...

CVE-2025-23263

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN...

CVE-2025-23263

NVIDIA DOCA-Host and Mellanox OFED contain CVE-2025-23263: a vulnerability in the VGT+ feature that could allow a VM attacker to escalate privileges and cause a denial of service on VLAN. The issue affects DOCA-Host and Mellanox OFED with VGT+ enabled and eSwitch in Legacy mode. NVIDIA’s security...

CVE-2025-23263

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN...

NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)

New critical vulnerability with 9.0 CVSS presents systemic risk to the AI ecosystem, carries widespread implications for AI infrastructure...

NVIDIA Container Toolkit 后置链接漏洞

NVIDIA Container Toolkit is a container toolkit introduced by NVIDIA for directly invoking GPU resources in containers, solving the problems of complex device access and insufficient resource isolation faced by traditional containerized GPU computing. NVIDIA Container Toolkit suffers from a...

PT-2025-29929 · Nvidia +1 · Nvidia Doca-Host +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DOCA-Host affected versions not specified Mellanox OFED affected versions not specified Description: NVIDIA DOCA-Host and Mellanox OFED contain an issue in the VGT+ feature that may allow an attacker on a virtual machine VM to escalate...

NVIDIA DOCA-Host和NVIDIA Mellanox OFED 安全漏洞

NVIDIA DOCA-Host and NVIDIA Mellanox OFED are both products of NVIDIA Corporation, U.S.A. NVIDIA DOCA-Host is a software package for host servers.NVIDIA Mellanox OFED is an Enhanced Networking Driver Box Stack Suite. A security vulnerability exists in NVIDIA DOCA-Host and NVIDIA Mellanox OFED tha...

Amazon Linux 2023 : nvidia-container, nvidia-container-toolkit (ALAS2023NVIDIA-2025-125)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-125 advisory. Placeholder CVE. Details forthcoming CVE-2025-23266 Placeholder CVE. Details forthcoming CVE-2025-23267 Tenable has extracted the preceding description block directly from the tested...

Critical: nvidia-container-toolkit

Issue Overview: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data...

PT-2025-29969

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux affected versions not specified Description NVIDIA Jetson Linux contains an issue in the kernel that may allow an attacker to expose sensitive information. This is due to a shared microarchitectural predictor state...

NVIDIA Container Toolkit < 1.17.8 Multiple Vulnerabilities (July 2025)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.8. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2025 advisory: - NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the...