Detections
Analytics
CVE-2025-23359
high
Description
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
References
https://www.darkreading.com/cloud-security/nvidia-container-bug-harden-kubernetes
https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html
https://thehackernews.com/2025/02/researchers-find-new-exploit-bypassing.html
https://www.wiz.io/blog/nvidia-ai-vulnerability-deep-dive-cve-2024-0132