Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Fedora 40 2025-c3c3774126: TOCTOU issue fixed in NVIDIA Toolkit 1.17.4

fedora
Calendar Grey May 2, 2025
Scroller Fedora
Fedora 40 release addresses TOCTOU concerns and boosts performance of NVIDIA container toolkit with version 1.17.4 improvements.
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j

Summary

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU

accelerated containers. The toolkit includes a container runtime library and

utilities to automatically configure containers to leverage NVIDIA GPUs.

Update Information:

Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j

Topics%20covered

Topics Covered

security advisory update Fedora software container TOCTOU

Change Log

* Wed Apr 23 2025 Debarshi Ray - 1.17.4-1 - Update to 1.17.4

References


[ 1 ] Bug #2345164 - CVE-2025-23359 golang-github-nvidia-container-toolkit: TOCTOU Vulnerability in NVIDIA Container Toolkit [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2345164

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-c3c3774126' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: golang-github-nvidia-container-toolkit
Product: Fedora 40
Version: 1.17.4
Release: 1.fc40
URL: https://github.com/NVIDIA/nvidia-container-toolkit
Summary: Build and run containers leveraging NVIDIA GPUs

Topics%20covered

Topics Covered

security advisory update Fedora software container TOCTOU

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.