Known vulnerabilities in NVIDIA GPU Operator

Vendor: nVidia
Software: NVIDIA GPU Operator
Software CPE: cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*
Website: https://www.nvidia.ru/page/home.html
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NVIDIA GPU Operator NVIDIA GPU Operator is affected by 9 known vulnerabilities: 1 high, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113764 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-23267		 CWE-59 Medium
No
No
 25.3.1 07.08.2025 SB2025080772
SB2025081001
SB2025081002
and 1 more
#VU113763 - Untrusted Search Path
CVE-2025-23266		 CWE-426 Low
Available
No
 25.3.1 07.08.2025 SB2025080772
SB2025080773
SB2025081001
and 4 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-23359		 CWE-367 High
No
No
 24.9.2 12.02.2025 SB2025021232
SB2025042336
SB2025042337
and 2 more
#VU102819 - Improper isolation or compartmentalization
CVE-2024-0137		 CWE-653 Medium
No
No
 24.9.1 15.01.2025 SB2025011576
SB2025012963
SB2025112468
#VU102818 - Improper isolation or compartmentalization
CVE-2024-0136		 CWE-653 Low
No
No
 24.9.1 15.01.2025 SB2025011576
SB2025012963
SB2025112468
#VU102817 - Improper isolation or compartmentalization
CVE-2024-0135		 CWE-653 Low
No
No
 24.9.1 15.01.2025 SB2025011576
SB2025012963
SB2025112468
#VU99744 - UNIX Symbolic Link (Symlink) Following
CVE-2024-0134		 CWE-61 Low
No
No
 24.9.z 05.11.2024 SB2024110520
SB2025012501
SB2025012502
and 2 more
#VU97847 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-0133		 CWE-367 Low
No
No
 24.6.2 01.10.2024 SB2024100101
SB2024110501
SB2024110502
and 2 more
#VU97846 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-0132		 CWE-367 Medium
Available
No
 24.6.2 01.10.2024 SB2024100101
SB2024110501
SB2024110502
and 2 more