GitHub Advisoryadvisory · Go

GHSA-67jc-hmvg-q4c7 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook

HIGH Published 2025-07-17 Modified 2025-11-05 Official page ↗
Aliases
CVE-2025-23267
Ecosystem
Go
Packages
github.com/NVIDIA/nvidia-container-toolkit, github.com/NVIDIA/k8s-device-plugin, github.com/NVIDIA/gpu-operator, github.com/NVIDIA/mig-parted
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Weaknesses
CWE-59
Reviewed
2025-10-02

Affected packages

• Go github.com/NVIDIA/nvidia-container-toolkit: < 1.17.8 → fixed in 1.17.8 • Go github.com/NVIDIA/k8s-device-plugin: < 0.17.3 → fixed in 0.17.3 • Go github.com/NVIDIA/gpu-operator: < 25.3.2 → fixed in 25.3.2 • Go github.com/NVIDIA/mig-parted: < 0.12.2 → fixed in 0.12.2

Description

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Related

Alias · CVE (1)

  • CVE-2025-23267 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link… vulnerability

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References