Data Tampering and Denial of Service Vulnerability in NVIDIA Container Toolkit
CVE-2025-23267

8.5HIGH

Key Information:

Vendor

Nvidia
Status
Container Toolkit
Vendor
CVE Published:
17 July 2025

What is CVE-2025-23267?

The NVIDIA Container Toolkit has a security vulnerability in its update-ldcache hook, which can be exploited by an attacker through the use of specially crafted container images. This flaw allows an attacker to manipulate data or cause a denial of service, potentially compromising the integrity and availability of applications relying on the NVIDIA Container Toolkit. It is crucial for users to take preventative measures to secure their environments against such exploitation.

Affected Version(s)

Container Toolkit Windows NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5)

Container Toolkit Windows NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5659

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23267 : Data Tampering and Denial of Service Vulnerability in NVIDIA Container Toolkit