[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcLufd7NUBHiP-BS05fQYrIaTkQmHSqZE9Z-k7ExEv9w":3,"g5a-risk:CVE-2025-23359":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":58,"references":59,"referencesCount":71,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":57,"cisaInfo":28,"otxData":28,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":125,"notableEvents":126},"CVE-2025-23359","What is CVE-2025-23359?","NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted containe...","2025-02-12T01:15:09.23","2025-09-25T13:50:04.687",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@nvidia.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","REQUIRED","CHANGED",8.3,null,1.6,6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"UNCHANGED",2.2,5.9,[],[],0.03669,[40,40,40,40,40,40,40],"High",[44,49,52],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"nvidia","nvidia_container_toolkit","*","cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":47,"criteria":51,"vulnerable":4},"nvidia_gpu_operator","cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":57},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",false,3,[60,65],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5616","Custhelp",[64],"Vendor Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fthehackernews.com\u002F2025\u002F04\u002Fincomplete-patch-in-nvidia-toolkit.html","Thehackernews",[69,70],"Exploit","Press\u002FMedia Coverage",2,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-367","Time-of-check Time-of-use (TOCTOU) Race Condition","The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.","This weakness can be security-relevant when an attacker can influence the state of the resource between check and use. This can happen with shared resources such as files, memory, or even variables in multithreaded programs.","Incomplete","Base","Simple",1,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2025-23359? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-23359, a high severity cyber security vulnerability from 2025. NVIDIA Container Toolkit for Linux contains a Time-of-Check...","CVE-2025-23359, CVE-2025-23359 vulnerability, CVE-2025-23359 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, nvidia security, linux security, nvidia_container_toolkit vulnerability, nvidia_gpu_operator vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2025-23359",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-23359","Cybersecurity","CVE-2025-23359, CVE-2025-23359 vulnerability, CVE-2025-23359 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":110,"Negate":28,"Nodes":111},"AND",[112,121],{"Operator":113,"Negate":57,"CPEMatch":114},"OR",[115,118],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":117,"VersionEndIncluding":28},"A771528B-FD02-4B98-BA64-BFAEA7BF71F4","1.17.4",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":120,"VersionEndIncluding":28},"FC194752-D788-4CCC-A4D2-01EB74232EE9","24.9.2",{"Operator":113,"Negate":57,"CPEMatch":122},[123],{"Vulnerable":57,"Criteria":56,"MatchCriteriaID":124,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",[],[],{"lastModified":11,"cacheTime":128,"version":129},1792248921041,"2.0",{"score":131,"band":132,"action":133,"scoredAt":134},51,"Medium","Plan remediation","2026-10-16T07:05:49.212141+00:00"]