NVIDIA Container Toolkit for Linux contains a race condition that performs a time‑of‑check, time‑of‑use (TOCTOU) operation on files used by the runtime. An attacker who can manipulate container configuration or the underlying file system may trigger this race, resulting in the kernel or runtime using a resource that has changed after validation. The vulnerability, identified as CWE‑367, allows the attacker to execute arbitrary code inside the container or on the host, elevate privileges, and tamper with data.

All released versions of NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux are potentially affected. No specific version ranges are listed, so all deployments should be treated as vulnerable until an official patch removes the race condition.

The CVSS score of 8.5 signals high severity, while the EPSS score of less than 1% indicates a low probability of exploitation currently. The flaw has not been listed in the CISA KEV catalog. Based on the description, the attack vector appears to involve manipulating files accessed during container execution; the exact pathway is not explicitly stated, so the vector is inferred from the race condition context.