NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4187-1 advisory.

    - Update to version 1.18.0:
      - This is a major release and includes the following high-level changes:
        - The default mode of the NVIDIA Container Runtime has been updated to make use           of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.
        - Added a systemd unit to generate CDI specifications for available devices automatically. This allows           native CDI support in container engines such as Docker and Podman to be used without additional     steps.

    - Security issues fixed:
      - CVE-2024-0133: Fixed data tampering in host file system via specially         crafted container image (bsc#1231032)
      - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition         in default configuration via specifically crafted container image         (bsc#1231033)
      - CVE-2024-0134: Fixed specially-crafted container image can lead to         the creation of unauthorized files on the host (bsc#1232855)
      - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236496)
      - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236497)
      - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236498)
      - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit         (bsc#1237085)
      - CVE-2025-23267: Fixed link following can lead to container escape         (bsc#1246614)
      - CVE-2025-23266: Fixed hook initialization might lead to escalation         of privileges (bsc#1246860)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially     crafted container image can lead to the creation of unauthorized files on the host. The name and location     of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to     data tampering. (CVE-2024-0134)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-76012a9a99 advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4






Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a15b07073f advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4









Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially     crafted container image can lead to the creation of unauthorized files on the host. The name and location     of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to     data tampering. (CVE-2024-0134)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17. It is, therefore, affected by a data tampering vulnerability as referenced in the November 2024 Security Bulletin.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted     container image can lead to the creation of unauthorized files on the host. The name and location of the files     cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276802	SUSE SLES15 / openSUSE 15 Security Update : nvidia-container-toolkit (SUSE-SU-2025:4187-1)	Nessus	SuSE Local Security Checks	critical
215932	Azure Linux 3.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)	Nessus	Azure Linux Local Security Checks	medium
215161	Fedora 40 : golang-github-nvidia-container-toolkit (2025-76012a9a99)	Nessus	Fedora Local Security Checks	high
215149	Fedora 41 : golang-github-nvidia-container-toolkit (2025-a15b07073f)	Nessus	Fedora Local Security Checks	high
212863	CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)	Nessus	MarinerOS Local Security Checks	medium
210406	NVIDIA Container Toolkit < 1.17 Data Tampering	Nessus	Misc.	medium

Detections

Analytics

CVE-2024-0134

medium

Tenable Plugins

critical

medium

high

high

medium

medium