Container Toolkit: Container escape to host root via TOCTOU race

CVSS 8.5CVE-2026-24260NVIDIA / GPU stackcurated

Impact

Container escape to host root via TOCTOU race

Who can reach it

Any tenant that can start a container on a GPU node

What to do

Bump nvidia-container-toolkit + restart container runtime on every GPU node; upgrade GPU Operator chart; evict and re-admit tenant workloads

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24260 https://github.com/NVIDIA/product-security/tree/main/2026/5850

Related entries

Container Toolkit: Container escape to host filesystem (bypass of the CVE-2024-0132 fix)CVE-2025-23359 · Container ToolkitHigh
Container Toolkit: Unauthorized empty-file creation on the hostCVE-2024-0133 · Container ToolkitMedium
Container Toolkit: Container escape to host filesystem via TOCTOU in the **default** configurationCVE-2024-0132 · Container ToolkitCritical
Container Toolkit: Container escape to host root via malicious image (LD_PRELOAD in OCI hook)CVE-2025-23266 · Container ToolkitCritical
Container Toolkit: Container escape / host file write via symlink followingCVE-2025-23267 · Container ToolkitHigh
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A local user gets elevated enough to rewrite display configurationCVE-2021-1051 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)High

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.