<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nvidia gpu operator</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-23359: NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with </title><link>https://patchthecve.com/cve/CVE-2025-23359.html</link><guid>https://patchthecve.com/cve/CVE-2025-23359.html</guid><pubDate>Wed, 17 Jun 2026 08:53:46 +0000</pubDate><description>HIGH 8.3: NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, </description></item><item><title>CVE-2024-0137: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container imag</title><link>https://patchthecve.com/cve/CVE-2024-0137.html</link><guid>https://patchthecve.com/cve/CVE-2024-0137.html</guid><pubDate>Wed, 17 Jun 2026 06:52:51 +0000</pubDate><description>MEDIUM 5.5: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful e</description></item><item><title>CVE-2024-0136: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container imag</title><link>https://patchthecve.com/cve/CVE-2024-0136.html</link><guid>https://patchthecve.com/cve/CVE-2024-0136.html</guid><pubDate>Wed, 17 Jun 2026 06:52:51 +0000</pubDate><description>HIGH 7.6: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A succ</description></item><item><title>CVE-2024-0135: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container imag</title><link>https://patchthecve.com/cve/CVE-2024-0135.html</link><guid>https://patchthecve.com/cve/CVE-2024-0135.html</guid><pubDate>Wed, 17 Jun 2026 06:52:51 +0000</pubDate><description>HIGH 7.6: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and</description></item><item><title>CVE-2024-0134: NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially craf</title><link>https://patchthecve.com/cve/CVE-2024-0134.html</link><guid>https://patchthecve.com/cve/CVE-2024-0134.html</guid><pubDate>Wed, 17 Jun 2026 06:52:50 +0000</pubDate><description>MEDIUM 4.1: NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerabi</description></item><item><title>CVE-2024-0133: NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing </title><link>https://patchthecve.com/cve/CVE-2024-0133.html</link><guid>https://patchthecve.com/cve/CVE-2024-0133.html</guid><pubDate>Wed, 17 Jun 2026 06:52:50 +0000</pubDate><description>MEDIUM 4.1: NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to da</description></item><item><title>CVE-2024-0132: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when us</title><link>https://patchthecve.com/cve/CVE-2024-0132.html</link><guid>https://patchthecve.com/cve/CVE-2024-0132.html</guid><pubDate>Wed, 17 Jun 2026 06:52:50 +0000</pubDate><description>CRITICAL 9.0: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of </description></item></channel></rss>