Affected: AlmaLinux:9: toolbox, AlmaLinux:9: toolbox-tests

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

* nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit (CVE-2025-23266)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

Affected: Go: github.com/NVIDIA/nvidia-container-toolkit, Go: github.com/NVIDIA/k8s-device-plugin, Go: github.com/NVIDIA/gpu-operator, Go: github.com/NVIDIA/mig-parted

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media

nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in dem mit Docker Desktop ausgelieferten NVIDIA Container Toolkit ausnutzen, um seine Privilegien zu erhöhen.