NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c3c3774126 advisory.

    * Update to 1.17.4
    * Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0245d352e6 advisory.

    * Update to 1.17.4
    * Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23359 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23359 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.4. It is, therefore, affected by a vulnerability as referenced in the February 2025 advisory.

  - NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used     with default configuration, where a crafted container image could gain access to the host file system. A     successful exploit of this vulnerability might lead to code execution, denial of service, escalation of     privileges, information disclosure, and data tampering. (CVE-2025-23359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
235467	Fedora 40 : golang-github-nvidia-container-toolkit (2025-c3c3774126)	Nessus	Fedora Local Security Checks	high
235466	Fedora 41 : golang-github-nvidia-container-toolkit (2025-0245d352e6)	Nessus	Fedora Local Security Checks	high
233087	Azure Linux 3.0 Security Update: nvidia-container-toolkit (CVE-2025-23359)	Nessus	Azure Linux Local Security Checks	high
216664	CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2025-23359)	Nessus	MarinerOS Local Security Checks	high
216261	NVIDIA Container Toolkit < 1.17.4 (2025_02)	Nessus	Misc.	high

Detections

Analytics

CVE-2025-23359

high

Tenable Plugins

high

high

high

high

high