nvidia-container-toolkit (SUSE:Linux Enterprise Module for Containers 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Containers 15 SP6 package nvidia-container-toolkit, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2025-23266 — CVSS 9.0 (critical): NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could…
• CVE-2024-0132 — CVSS 9.0 (critical): NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration…
• CVE-2025-23267 — CVSS 8.5 (high): NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link…
• CVE-2025-23359 — CVSS 8.3 (high): NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where…
• CVE-2024-0136 — CVSS 7.6 (high): NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted…
• CVE-2024-0135 — CVSS 7.6 (high): NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification…
• CVE-2024-0137 — CVSS 5.5 (medium): NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted…
• CVE-2024-0134 — CVSS 4.1 (medium): NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead…
• CVE-2024-0133 — CVSS 4.1 (medium): NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container…