NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4187-1 advisory.

    - Update to version 1.18.0:
      - This is a major release and includes the following high-level changes:
        - The default mode of the NVIDIA Container Runtime has been updated to make use           of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.
        - Added a systemd unit to generate CDI specifications for available devices automatically. This allows           native CDI support in container engines such as Docker and Podman to be used without additional     steps.

    - Security issues fixed:
      - CVE-2024-0133: Fixed data tampering in host file system via specially         crafted container image (bsc#1231032)
      - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition         in default configuration via specifically crafted container image         (bsc#1231033)
      - CVE-2024-0134: Fixed specially-crafted container image can lead to         the creation of unauthorized files on the host (bsc#1232855)
      - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236496)
      - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236497)
      - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236498)
      - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit         (bsc#1237085)
      - CVE-2025-23267: Fixed link following can lead to container escape         (bsc#1246614)
      - CVE-2025-23266: Fixed hook initialization might lead to escalation         of privileges (bsc#1246860)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-76012a9a99 advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4






Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a15b07073f advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4









Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.1. It is, therefore, affected by multiple vulnerabilities as referenced in the January 2025 advisory.

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to     code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2024-0135)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is     present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of     this vulnerability may lead to code execution, denial of service, escalation of privileges, information     disclosure, and data tampering. (CVE-2024-0136)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code running in the host’s network namespace. This vulnerability is present     only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this     vulnerability may lead to denial of service and escalation of privileges. (CVE-2024-0137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276802	SUSE SLES15 / openSUSE 15 Security Update : nvidia-container-toolkit (SUSE-SU-2025:4187-1)	Nessus	SuSE Local Security Checks	critical
215161	Fedora 40 : golang-github-nvidia-container-toolkit (2025-76012a9a99)	Nessus	Fedora Local Security Checks	high
215149	Fedora 41 : golang-github-nvidia-container-toolkit (2025-a15b07073f)	Nessus	Fedora Local Security Checks	high
214271	NVIDIA Container Toolkit 1.17.1 Multiple Vulnerabilities (2025_01)	Nessus	Misc.	high

Detections

Analytics

CVE-2024-0135

high

Tenable Plugins

critical

high

high

high