GO-2025-3998
NoneCVSS
—
EPSS
—
Published
Oct 23, 2025
CISA due date
—
The record
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/NVIDIA/gpu-operator | 0 | No fix |
| Go | github.com/NVIDIA/gpu-operator | 0 | 25.3.2 |
| Go | github.com/NVIDIA/k8s-device-plugin | 0 | 0.17.3 |
| Go | github.com/NVIDIA/mig-parted | 0 | 0.12.2 |
| Go | github.com/NVIDIA/nvidia-container-toolkit | 0 | 1.17.8 |