NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4187-1 advisory.

    - Update to version 1.18.0:
      - This is a major release and includes the following high-level changes:
        - The default mode of the NVIDIA Container Runtime has been updated to make use           of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.
        - Added a systemd unit to generate CDI specifications for available devices automatically. This allows           native CDI support in container engines such as Docker and Podman to be used without additional     steps.

    - Security issues fixed:
      - CVE-2024-0133: Fixed data tampering in host file system via specially         crafted container image (bsc#1231032)
      - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition         in default configuration via specifically crafted container image         (bsc#1231033)
      - CVE-2024-0134: Fixed specially-crafted container image can lead to         the creation of unauthorized files on the host (bsc#1232855)
      - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236496)
      - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236497)
      - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in         NVIDIA Container Toolkit (bsc#1236498)
      - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit         (bsc#1237085)
      - CVE-2025-23267: Fixed link following can lead to container escape         (bsc#1246614)
      - CVE-2025-23266: Fixed hook initialization might lead to escalation         of privileges (bsc#1246860)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used
    with default configuration, where a crafted container image could gain access to the host file system. A
    successful exploit of this vulnerability might lead to code execution, denial of service, escalation of
    privileges, information disclosure, and data tampering. (CVE-2025-23359)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c3c3774126 advisory.

    * Update to 1.17.4
    * Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0245d352e6 advisory.

    * Update to 1.17.4
    * Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23359 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23359 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.4. It is, therefore, affected by a vulnerability as referenced in the February 2025 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276802	SUSE SLES15 / openSUSE 15 Security Update : nvidia-container-toolkit (SUSE-SU-2025:4187-1)	Nessus	SuSE Local Security Checks	critical
428142	Bottlerocket: libnvidia-container, nvidia-container-toolkit: security update to 1.17.4	Tenable Cloud Security	Bottlerocket Local Security Checks	high
428142	Bottlerocket: libnvidia-container, nvidia-container-toolkit: security update to 1.17.4	Tenable Self-Hosted Container Security	Bottlerocket Local Security Checks	high
235467	Fedora 40 : golang-github-nvidia-container-toolkit (2025-c3c3774126)	Nessus	Fedora Local Security Checks	high
235466	Fedora 41 : golang-github-nvidia-container-toolkit (2025-0245d352e6)	Nessus	Fedora Local Security Checks	high
233087	Azure Linux 3.0 Security Update: nvidia-container-toolkit (CVE-2025-23359)	Nessus	Azure Linux Local Security Checks	high
216664	CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2025-23359)	Nessus	MarinerOS Local Security Checks	high
216261	NVIDIA Container Toolkit < 1.17.4 (2025_02)	Nessus	Misc.	high

Detections

Analytics

CVE-2025-23359

high

Tenable Plugins

critical

high

high

high

high

high

high

high