Known vulnerabilities in NVIDIA GPU Operator

Known vulnerabilities in NVIDIA GPU Operator

Vendor: nVidia

Software: NVIDIA GPU Operator

Software CPE: cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*

Website: https://www.nvidia.ru/page/home.html

Total vulnerabilities: 9

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113764 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-23267	CWE-59	Medium	No	No	25.3.1	07.08.2025	SB2025080772 SB2025081001 SB2025081002 and 1 more
#VU113763 - Untrusted Search Path CVE-2025-23266	CWE-426	Low	Available	No	25.3.1	07.08.2025	SB2025080772 SB2025080773 SB2025081001 and 4 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2025-23359	CWE-367	High	No	No	24.9.2	12.02.2025	SB2025021232 SB2025042336 SB2025042337 and 2 more
#VU102819 - Improper isolation or compartmentalization CVE-2024-0137	CWE-653	Medium	No	No	24.9.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU102818 - Improper isolation or compartmentalization CVE-2024-0136	CWE-653	Low	No	No	24.9.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU102817 - Improper isolation or compartmentalization CVE-2024-0135	CWE-653	Low	No	No	24.9.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU99744 - UNIX Symbolic Link (Symlink) Following CVE-2024-0134	CWE-61	Low	No	No	24.9.z	05.11.2024	SB2024110520 SB2025012501 SB2025012502 and 2 more
#VU97847 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-0133	CWE-367	Low	No	No	24.6.2	01.10.2024	SB2024100101 SB2024110501 SB2024110502 and 2 more
#VU97846 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-0132	CWE-367	Medium	Available	No	24.6.2	01.10.2024	SB2024100101 SB2024110501 SB2024110502 and 2 more