GCVE - cpe:2.3:a:nvidia:gpu_operator:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:gpu_operator:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Gpu Operator (`aa7af6f6-8ca1-58e5-85d2-a53362490a00`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24260`	vulnerable	2026-07-29 00:32:00.900053	Details available HIGH (8.5) NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering. Published: 2026-07-01T14:34:54.537Z Updated: 2026-07-02T03:57:33.130Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2026-24260 https://www.cve.org/CVERecord?id=CVE-2026-24260 https://github.com/NVIDIA/product-security/tree/main/2026/5850	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23359`	vulnerable	2026-06-08 07:10:55.567341	Details available HIGH (8.3) NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Published: 2025-02-12T00:52:43.646Z Updated: 2025-04-11T13:24:14.643Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5616	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0133`	vulnerable	2026-06-08 06:21:58.369130	Details available MEDIUM (4.1) NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering. Published: 2024-09-26T05:21:33.599Z Updated: 2024-09-26T13:30:42.127Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5582	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0132`	vulnerable	2026-06-08 06:21:58.359223	Details available CRITICAL (9) NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Published: 2024-09-26T05:18:33.211Z Updated: 2024-09-27T03:55:16.649Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5582	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.