Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-01T14:34:54 NVIDIA Container Toolkit: NVIDIA Container Toolkit: Privilege escalation and code execution via race condition 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CWE-367

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.

A flaw was found in NVIDIA Container Toolkit. An attacker could exploit a time-of-check time-of-use (TOCTOU) race condition. This vulnerability might allow an attacker to achieve code execution, escalate privileges, and tamper with data.

A flaw was found in NVIDIA Container Toolkit versions through 1.19.0, where a time-of-check time-of-use (TOCTOU) race condition could allow an attacker to achieve code execution, privilege escalation, and data tampering. Red Hat ships NVIDIA Container Toolkit version 1.19.1 in RHEL 9 and RHEL 10, which includes the fix for this vulnerability. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Red Hat Enterprise Linux 10 Not affected nvidia-container-toolkit Red Hat Enterprise Linux 9 Not affected nvidia-container-toolkit https://www.cve.org/CVERecord?id=CVE-2026-24260 https://nvd.nist.gov/vuln/detail/CVE-2026-24260 https://github.com/NVIDIA/product-security/tree/main/2026/5850