{"id":"CVE-2025-23359","aliases":["AZL-56852","AZL-56857","EUVD-2025-3156","GHSA-4hmh-pm5p-9j7j","SUSE-SU-2025:4187-1"],"status":"published","title":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability...","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03669,"percentile":0.89745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-367"],"published":"2025-02-12T00:52:43Z","modified":"2026-06-17T08:53:46Z","fixes":[{"ecosystem":"Azure Linux:3","package":"nvidia-container-toolkit","fixed_in":["1.17.4-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nvidia-container-toolkit","fixed_in":["1.17.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.4-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.4-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9}],"products":[{"vendor":"nvidia","product":"container toolkit"},{"vendor":"nvidia","product":"gpu operator"},{"vendor":"nvidia","product":"nvidia_container_toolkit"},{"vendor":"nvidia","product":"nvidia_gpu_operator"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5616","tags":["Vendor Advisory"]},{"url":"https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html","tags":["media-coverage","exploit","Exploit","Press/Media Coverage"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23359","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4hmh-pm5p-9j7j"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254187-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231032","tags":["report"]},{"url":"https://bugzilla.suse.com/1231033","tags":["report"]},{"url":"https://bugzilla.suse.com/1232855","tags":["report"]},{"url":"https://bugzilla.suse.com/1236496","tags":["report"]},{"url":"https://bugzilla.suse.com/1236497","tags":["report"]},{"url":"https://bugzilla.suse.com/1236498","tags":["report"]},{"url":"https://bugzilla.suse.com/1237085","tags":["report"]},{"url":"https://bugzilla.suse.com/1246614","tags":["report"]},{"url":"https://bugzilla.suse.com/1246860","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23359","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-23359","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T00:52:43.646Z","modified":"2025-04-11T13:24:14.643Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:32:33.082076Z"}],"euvd":[{"id":"EUVD-2025-3156","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T00:52:43Z","modified":"2025-04-11T13:24:14Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:34.890721Z"}],"ghsa":[{"id":"GHSA-4hmh-pm5p-9j7j","title":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability...","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T03:31:14Z","modified":"2025-04-11T15:32:26Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T15:01:16.487496Z"}],"nvd":[{"id":"CVE-2025-23359","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T01:15:09.23Z","modified":"2026-06-17T08:53:46.81Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:10:51.445921Z"}],"osv":[{"id":"AZL-56852","title":"CVE-2025-23359 affecting package nvidia-container-toolkit for versions less than 1.17.4-1","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T01:15:09Z","modified":"2026-04-21T04:48:36.923161Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-56857","title":"CVE-2025-23359 affecting package nvidia-container-toolkit for versions less than 1.17.4-1","description":"NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","status":"published","published":"2025-02-12T01:15:09Z","modified":"2026-04-21T04:36:48.837054Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"SUSE-SU-2025:4187-1","title":"Security update for nvidia-container-toolkit","description":"This update for nvidia-container-toolkit fixes the following issues:\n\n- Update to version 1.18.0:\n  - This is a major release and includes the following high-level changes:\n    - The default mode of the NVIDIA Container Runtime has been updated to make use\n      of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.\n    - Added a systemd unit to generate CDI specifications for available devices automatically. This allows\n      native CDI support in container engines such as Docker and Podman to be used without additional steps.\n  \n- Security issues fixed:\n  - CVE-2024-0133: Fixed data tampering in host file system via specially\n    crafted container image (bsc#1231032)\n  - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition\n    in default configuration via specifically crafted container image\n    (bsc#1231033)\n  - CVE-2024-0134: Fixed specially-crafted container image can lead to\n    the creation of unauthorized files on the host (bsc#1232855)\n  - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236496)\n  - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236497)\n  - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236498)\n  - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit\n    (bsc#1237085)\n  - CVE-2025-23267: Fixed link following can lead to container escape\n    (bsc#1246614)\n  - CVE-2025-23266: Fixed hook initialization might lead to escalation\n    of privileges (bsc#1246860)\n","status":"published","published":"2025-11-24T07:58:47Z","modified":"2026-03-23T04:51:27.139721Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}