NVIDIA Container Toolkit Update-Ldcache Hook Vulnerability Allowing Data Tampering and Denial-of-Service

A vulnerability exists in the NVIDIA Container Toolkit's update-ldcache hook, where an attacker could manipulate link following by using a specially crafted container image. This exploitation could result in data tampering and a denial-of-service condition.

Impact

Exploitation of this vulnerability could lead to unauthorized data modifications and cause a denial-of-service condition.

Remediation

Users can update to NVIDIA Container Toolkit version 1.17.8. Instructions for updating can be found in the NVIDIA Container Toolkit installation guide. For those using the NVIDIA GPU Operator, version 25.3.1 includes this update. If using a GPU Operator version prior to 25.3.1, NVIDIA Container Toolkit 1.17.8 can be deployed by specifying the version during the installation or upgrade process.