Junglewise Threat Intelligence
CVE-2025-23267: GO-2025-3998 - NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
CVE-2025-23267 · Severity: low · CVSS 3.1 · Published 2025-10-23
Technologies: github.com/NVIDIA/nvidia-container-toolkit (Go). Vendors: Go.
Executive brief
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
Affected products
- Go github.com/NVIDIA/gpu-operator
- Go github.com/NVIDIA/k8s-device-plugin
- Go github.com/NVIDIA/mig-parted
- Go github.com/NVIDIA/nvidia-container-toolkit