csaf_suse - suse-su-2025:4187-1

suse-su-2025:4187-1

Vulnerability from csaf_suse

Published

2025-11-24 07:58

Modified

2025-11-24 07:58

Summary

Security update for nvidia-container-toolkit

Notes

Title of the patch

Security update for nvidia-container-toolkit

Description of the patch

This update for nvidia-container-toolkit fixes the following issues: - Update to version 1.18.0: - This is a major release and includes the following high-level changes: - The default mode of the NVIDIA Container Runtime has been updated to make use of a just-in-time-generated CDI specification instead of defaulting to the legacy mode. - Added a systemd unit to generate CDI specifications for available devices automatically. This allows native CDI support in container engines such as Docker and Podman to be used without additional steps. - Security issues fixed: - CVE-2024-0133: Fixed data tampering in host file system via specially crafted container image (bsc#1231032) - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition in default configuration via specifically crafted container image (bsc#1231033) - CVE-2024-0134: Fixed specially-crafted container image can lead to the creation of unauthorized files on the host (bsc#1232855) - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236496) - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236497) - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236498) - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit (bsc#1237085) - CVE-2025-23267: Fixed link following can lead to container escape (bsc#1246614) - CVE-2025-23266: Fixed hook initialization might lead to escalation of privileges (bsc#1246860)

Patchnames

SUSE-2025-4187,SUSE-SLE-Module-Containers-15-SP6-2025-4187,SUSE-SLE-Module-Containers-15-SP7-2025-4187,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4187,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4187,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4187,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4187,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-4187,SUSE-Storage-7.1-2025-4187,openSUSE-SLE-15.6-2025-4187

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nvidia-container-toolkit",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nvidia-container-toolkit fixes the following issues:\n\n- Update to version 1.18.0:\n  - This is a major release and includes the following high-level changes:\n    - The default mode of the NVIDIA Container Runtime has been updated to make use\n      of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.\n    - Added a systemd unit to generate CDI specifications for available devices automatically. This allows\n      native CDI support in container engines such as Docker and Podman to be used without additional steps.\n  \n- Security issues fixed:\n  - CVE-2024-0133: Fixed data tampering in host file system via specially\n    crafted container image (bsc#1231032)\n  - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition\n    in default configuration via specifically crafted container image\n    (bsc#1231033)\n  - CVE-2024-0134: Fixed specially-crafted container image can lead to\n    the creation of unauthorized files on the host (bsc#1232855)\n  - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236496)\n  - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236497)\n  - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236498)\n  - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit\n    (bsc#1237085)\n  - CVE-2025-23267: Fixed link following can lead to container escape\n    (bsc#1246614)\n  - CVE-2025-23266: Fixed hook initialization might lead to escalation\n    of privileges (bsc#1246860)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-4187,SUSE-SLE-Module-Containers-15-SP6-2025-4187,SUSE-SLE-Module-Containers-15-SP7-2025-4187,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4187,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4187,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4187,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4187,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-4187,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-4187,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-4187,SUSE-Storage-7.1-2025-4187,openSUSE-SLE-15.6-2025-4187",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_4187-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:4187-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20254187-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:4187-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-November/023342.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1231032",
        "url": "https://bugzilla.suse.com/1231032"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1231033",
        "url": "https://bugzilla.suse.com/1231033"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1232855",
        "url": "https://bugzilla.suse.com/1232855"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1236496",
        "url": "https://bugzilla.suse.com/1236496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1236497",
        "url": "https://bugzilla.suse.com/1236497"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1236498",
        "url": "https://bugzilla.suse.com/1236498"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1237085",
        "url": "https://bugzilla.suse.com/1237085"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246614",
        "url": "https://bugzilla.suse.com/1246614"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246860",
        "url": "https://bugzilla.suse.com/1246860"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0132 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0132/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0133 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0133/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0134 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0134/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0135 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0135/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0136 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0136/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0137 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0137/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23266 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23267 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23267/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-23359 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-23359/"
      }
    ],
    "title": "Security update for nvidia-container-toolkit",
    "tracking": {
      "current_release_date": "2025-11-24T07:58:47Z",
      "generator": {
        "date": "2025-11-24T07:58:47Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:4187-1",
      "initial_release_date": "2025-11-24T07:58:47Z",
      "revision_history": [
        {
          "date": "2025-11-24T07:58:47Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
                "product": {
                  "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
                  "product_id": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
                "product": {
                  "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
                  "product_id": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
                "product": {
                  "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
                  "product_id": "nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
                "product": {
                  "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
                  "product_id": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Containers 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Containers 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-containers:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Containers 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Containers 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Containers 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-containers:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7.1",
                "product": {
                  "name": "SUSE Enterprise Storage 7.1",
                  "product_id": "SUSE Enterprise Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        },
        "product_reference": "nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-0132",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0132"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0132",
          "url": "https://www.suse.com/security/cve/CVE-2024-0132"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231033 for CVE-2024-0132",
          "url": "https://bugzilla.suse.com/1231033"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-0132"
    },
    {
      "cve": "CVE-2024-0133",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0133"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0133",
          "url": "https://www.suse.com/security/cve/CVE-2024-0133"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231032 for CVE-2024-0133",
          "url": "https://bugzilla.suse.com/1231032"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-0133"
    },
    {
      "cve": "CVE-2024-0134",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0134"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0134",
          "url": "https://www.suse.com/security/cve/CVE-2024-0134"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232855 for CVE-2024-0134",
          "url": "https://bugzilla.suse.com/1232855"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "low"
        }
      ],
      "title": "CVE-2024-0134"
    },
    {
      "cve": "CVE-2024-0135",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0135"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0135",
          "url": "https://www.suse.com/security/cve/CVE-2024-0135"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1236496 for CVE-2024-0135",
          "url": "https://bugzilla.suse.com/1236496"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-0135"
    },
    {
      "cve": "CVE-2024-0136",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0136"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0136",
          "url": "https://www.suse.com/security/cve/CVE-2024-0136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1236497 for CVE-2024-0136",
          "url": "https://bugzilla.suse.com/1236497"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-0136"
    },
    {
      "cve": "CVE-2024-0137",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0137"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host\u0027s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0137",
          "url": "https://www.suse.com/security/cve/CVE-2024-0137"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1236498 for CVE-2024-0137",
          "url": "https://bugzilla.suse.com/1236498"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-0137"
    },
    {
      "cve": "CVE-2025-23266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23266",
          "url": "https://www.suse.com/security/cve/CVE-2025-23266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246860 for CVE-2025-23266",
          "url": "https://bugzilla.suse.com/1246860"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-23266"
    },
    {
      "cve": "CVE-2025-23267",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23267"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23267",
          "url": "https://www.suse.com/security/cve/CVE-2025-23267"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246614 for CVE-2025-23267",
          "url": "https://bugzilla.suse.com/1246614"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23267"
    },
    {
      "cve": "CVE-2025-23359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-23359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
          "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-23359",
          "url": "https://www.suse.com/security/cve/CVE-2025-23359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237085 for CVE-2025-23359",
          "url": "https://bugzilla.suse.com/1237085"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Enterprise Storage 7.1:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP7:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.aarch64",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.ppc64le",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.s390x",
            "openSUSE Leap 15.6:nvidia-container-toolkit-1.18.0-150200.5.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-24T07:58:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-23359"
    }
  ]
}

CVE-2024-0136 (GCVE-0-2024-0136)

Vulnerability from cvelistv5

Published

2025-01-28 03:09

Modified

2025-01-28 15:15

Severity ?

7.6 (High) - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-653

Summary

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5599

Impacted products

Vendor

Product

Version

NVIDIA

NVIDIA Container Toolkit

Version: All versions up to and including v1.17.0

NVIDIA

NVIDIA GPU Operator

Version: All versions up to and including 24.9.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0136",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:53:48.462690Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:15:51.481Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.17.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.9.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\u003c/span\u003e\n\n\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, denial of service, escalation of privileges, information disclosure, data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "CWE-653",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T03:09:53.568Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5599"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0136",
    "datePublished": "2025-01-28T03:09:53.568Z",
    "dateReserved": "2023-12-02T00:42:47.163Z",
    "dateUpdated": "2025-01-28T15:15:51.481Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0134 (GCVE-0-2024-0134)

Vulnerability from cvelistv5

Published

2024-11-05 18:37

Modified

2024-11-05 18:52

Severity ?

4.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

CWE

CWE-61

Summary

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5585

Impacted products

Vendor

Product

Version

NVIDIA

NVIDIA Container Toolkit

Version: All versions up to and including v1.16.2

NVIDIA

NVIDIA GPU Operator

Version: All versions up to and including 24.6.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0134",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-05T18:51:43.650698Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-05T18:52:00.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.16.2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.6.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-61",
              "description": "CWE-61",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-05T18:37:31.699Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5585"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0134",
    "datePublished": "2024-11-05T18:37:31.699Z",
    "dateReserved": "2023-12-02T00:42:44.854Z",
    "dateUpdated": "2024-11-05T18:52:00.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0133 (GCVE-0-2024-0133)

Vulnerability from cvelistv5

Published

2024-09-26 05:21

Modified

2024-09-26 13:30

Severity ?

4.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Summary

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5582

Impacted products

Vendor

Product

Version

NVIDIA

Container Toolkit

Version: All versions up to and including v1.16.1

NVIDIA

GPU Operator

Version: All versions up to and including 24.6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0133",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T13:30:24.651473Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T13:30:42.127Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.16.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-26T05:21:33.599Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5582"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0133",
    "datePublished": "2024-09-26T05:21:33.599Z",
    "dateReserved": "2023-12-02T00:42:44.017Z",
    "dateUpdated": "2024-09-26T13:30:42.127Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0135 (GCVE-0-2024-0135)

Vulnerability from cvelistv5

Published

2025-01-28 03:09

Modified

2025-01-28 15:16

Severity ?

7.6 (High) - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-653

Summary

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5599

Impacted products

Vendor

Product

Version

NVIDIA

NVIDIA Container Toolkit

Version: All versions up to and including v1.17.0

NVIDIA

NVIDIA GPU Operator

Version: All versions up to and including 24.9.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:53:50.281576Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:16:03.279Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.17.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.9.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, denial of service, escalation of privileges, information disclosure, data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "CWE-653",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T03:09:02.626Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5599"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0135",
    "datePublished": "2025-01-28T03:09:02.626Z",
    "dateReserved": "2023-12-02T00:42:46.157Z",
    "dateUpdated": "2025-01-28T15:16:03.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-23359 (GCVE-0-2025-23359)

Vulnerability from cvelistv5

Published

2025-02-12 00:52

Modified

2025-04-11 13:24

Severity ?

8.3 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Summary

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5616

Impacted products

Vendor

Product

Version

NVIDIA

Container Toolkit

Version: All versions up to and including 1.17.3

NVIDIA

GPU Operator

Version: All versions up to and including 24.9.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-23359",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T13:20:19.602945Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T13:24:14.643Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "media-coverage",
              "exploit"
            ],
            "url": "https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 1.17.3"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.9.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, denial of service, escalation of privileges, information disclosure, data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-12T00:52:43.646Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5616"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eThis vulnerability does not impact use cases where CDI is used.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eThe fix for this vulnerability changes the default behavior of the NVIDIA Container Toolkit. By default the NVIDIA CUDA compatibility libraries from /usr/local/cuda/compat in the container are no longer mounted to the default library path in the container being run. This may affect certain applications that depend on this behavior.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eA feature flag, allow-cuda-compat-libs-from-container was included in the NVIDIA Container Toolkit to allow users to opt-in to the previous behavior if required.\u003cbr\u003eWarning: Opting-in to the previous behavior will remove protection against this vulnerability and is not recommended.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eTo set the feature flag ensure that the NVIDIA Container Toolkit config file at /etc/nvidia-container-runtime/config.toml includes:\u003cbr\u003e\u003cbr\u003e[features]\u003cbr\u003e\u0026nbsp; allow-cuda-compat-libs-from-container = true\u003c/div\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e\u003cdiv\u003eSetting the value above to false or removing the config file entry will disable the feature.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eIn the case of the NVIDIA GPU Operator the feature flag can be set by including the following in the NVIDIA GPU Operator helm install command:\u003c/div\u003e\u003cdiv\u003e--set \"toolkit.env[0].name=NVIDIA_CONTAINER_TOOLKIT_OPT_IN_FEATURES\" --set \"toolkit.env[0].value=allow-cuda-compat-libs-from-container\"\u003c/div\u003e\u003cdiv\u003e\u0026nbsp;\u003c/div\u003e\u003cdiv\u003eFor users who know that their application needs CUDA Forward Compatibility the following workaround can be used:\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eSetting the LD_LIBRARY_PATH environment variable to include /usr/local/cuda/compat\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003eThis may cause portability issues for some containers when running across multiple driver versions \u2013 especially when these are more recent than the compatibility libraries in the container.\u003c/div\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "This vulnerability does not impact use cases where CDI is used.\n\n\nThe fix for this vulnerability changes the default behavior of the NVIDIA Container Toolkit. By default the NVIDIA CUDA compatibility libraries from /usr/local/cuda/compat in the container are no longer mounted to the default library path in the container being run. This may affect certain applications that depend on this behavior.\n\n\nA feature flag, allow-cuda-compat-libs-from-container was included in the NVIDIA Container Toolkit to allow users to opt-in to the previous behavior if required.\nWarning: Opting-in to the previous behavior will remove protection against this vulnerability and is not recommended.\n\n\nTo set the feature flag ensure that the NVIDIA Container Toolkit config file at /etc/nvidia-container-runtime/config.toml includes:\n\n[features]\n\u00a0 allow-cuda-compat-libs-from-container = true\n\n\u00a0Setting the value above to false or removing the config file entry will disable the feature.\n\n\nIn the case of the NVIDIA GPU Operator the feature flag can be set by including the following in the NVIDIA GPU Operator helm install command:\n\n--set \"toolkit.env[0].name=NVIDIA_CONTAINER_TOOLKIT_OPT_IN_FEATURES\" --set \"toolkit.env[0].value=allow-cuda-compat-libs-from-container\"\n\n\u00a0\n\nFor users who know that their application needs CUDA Forward Compatibility the following workaround can be used:\n\n\nSetting the LD_LIBRARY_PATH environment variable to include /usr/local/cuda/compat\n\n\nThis may cause portability issues for some containers when running across multiple driver versions \u2013 especially when these are more recent than the compatibility libraries in the container."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2025-23359",
    "datePublished": "2025-02-12T00:52:43.646Z",
    "dateReserved": "2025-01-14T01:07:26.681Z",
    "dateUpdated": "2025-04-11T13:24:14.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0132 (GCVE-0-2024-0132)

Vulnerability from cvelistv5

Published

2024-09-26 05:18

Modified

2024-09-27 03:55

Severity ?

9.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Summary

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5582

Impacted products

Vendor

Product

Version

NVIDIA

Container Toolkit

Version: All versions up to and including v1.16.1

NVIDIA

GPU Operator

Version: All versions up to and including 24.6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:nvidia:container_toolkit:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "container_toolkit",
            "vendor": "nvidia",
            "versions": [
              {
                "lessThanOrEqual": "1.16.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:nvidia:gpu_operator:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "gpu_operator",
            "vendor": "nvidia",
            "versions": [
              {
                "lessThanOrEqual": "24.6.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0132",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T03:55:16.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.16.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, denial of service, escalation of privileges, information disclosure, data tampering"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-26T05:18:33.211Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5582"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0132",
    "datePublished": "2024-09-26T05:18:33.211Z",
    "dateReserved": "2023-12-02T00:42:43.107Z",
    "dateUpdated": "2024-09-27T03:55:16.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0137 (GCVE-0-2024-0137)

Vulnerability from cvelistv5

Published

2025-01-28 03:10

Modified

2025-01-28 15:15

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

CWE

CWE-653

Summary

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5599

Impacted products

Vendor

Product

Version

NVIDIA

NVIDIA Container Toolkit

Version: All versions up to and including v1.17.0

NVIDIA

NVIDIA GPU Operator

Version: All versions up to and including 24.9.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0137",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:53:20.208800Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:15:38.917Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including v1.17.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "NVIDIA GPU Operator",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions up to and including 24.9.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host\u2019s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.\u003c/span\u003e\n\n\u003c/span\u003e\n\n\u003c/span\u003e"
            }
          ],
          "value": "NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host\u2019s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Denial of service, escalation of privileges"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "CWE-653",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T03:10:36.813Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5599"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2024-0137",
    "datePublished": "2025-01-28T03:10:36.813Z",
    "dateReserved": "2023-12-02T00:42:48.032Z",
    "dateUpdated": "2025-01-28T15:15:38.917Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-23267 (GCVE-0-2025-23267)

Vulnerability from cvelistv5

Published

2025-07-17 19:32

Modified

2025-11-04 21:09

Severity ?

8.5 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Summary

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5659

Impacted products

	Vendor	Product	Version
	NVIDIA	Container Toolkit	Version: NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5) Version: NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-23267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-17T20:09:29.710381Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-17T20:09:42.007Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:09:39.708Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/16/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "product": "Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5)"
            },
            {
              "status": "affected",
              "version": "NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service."
            }
          ],
          "value": "NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Data tampering, denial of service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-17T19:32:36.958Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5659"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2025-23267",
    "datePublished": "2025-07-17T19:32:36.958Z",
    "dateReserved": "2025-01-14T01:06:23.291Z",
    "dateUpdated": "2025-11-04T21:09:39.708Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-23266 (GCVE-0-2025-23266)

Vulnerability from cvelistv5

Published

2025-07-17 19:08

Modified

2025-08-16 21:33

Severity ?

9.0 (Critical) - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-426 - Untrusted Search Path

Summary

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

References

URL

Tags

https://nvidia.custhelp.com/app/answers/detail/a_id/5659

Impacted products

	Vendor	Product	Version
	NVIDIA	Container Toolkit	Version: NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5) Version: NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-23266",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-18T03:55:34.629Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-08-16T21:33:32.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266/"
          },
          {
            "url": "https://news.ycombinator.com/item?id=44818412"
          },
          {
            "url": "https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape"
          },
          {
            "url": "https://kidbomb.github.io/posts/nvidia-container-escape-cve-2025-23266-part-2/"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "MacOS"
          ],
          "product": "Container Toolkit",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "NVIDIA Container Toolkit All versions up to and including 1.17.7 (CDI mode only for versions prior to 1.17.5)"
            },
            {
              "status": "affected",
              "version": "NVIDIA GPU Operator All versions up to and including 25.3.0 (CDI mode only for versions prior to 25.3.0)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service."
            }
          ],
          "value": "NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Escalation of privileges, data tampering, information disclosure, denial of service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-17T19:08:21.352Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5659"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2025-23266",
    "datePublished": "2025-07-17T19:08:21.352Z",
    "dateReserved": "2025-01-14T01:06:23.291Z",
    "dateUpdated": "2025-08-16T21:33:32.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2025:4187-1

Vulnerability from csaf_suse

CVE-2024-0136 (GCVE-0-2024-0136)

Vulnerability from cvelistv5

CVE-2024-0134 (GCVE-0-2024-0134)

Vulnerability from cvelistv5

CVE-2024-0133 (GCVE-0-2024-0133)

Vulnerability from cvelistv5

CVE-2024-0135 (GCVE-0-2024-0135)

Vulnerability from cvelistv5

CVE-2025-23359 (GCVE-0-2025-23359)

Vulnerability from cvelistv5

CVE-2024-0132 (GCVE-0-2024-0132)

Vulnerability from cvelistv5

CVE-2024-0137 (GCVE-0-2024-0137)

Vulnerability from cvelistv5

CVE-2025-23267 (GCVE-0-2025-23267)

Vulnerability from cvelistv5

CVE-2025-23266 (GCVE-0-2025-23266)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature