Back Linuxsecurity

openSUSE 15.6 libnvidia-container Important TOCTOU Issues 2026-0558

Linuxsecurity •LinuxSecurity Advisories • February 16, 2026

This update for libnvidia-container fixes the following issues: Update to version 1.18.0. Security issues fixed: * CVE-2024-0132: time-of-check time-of-use (TOCTOU) race condition in default configuration via specifically crafted container image (bsc#1231033). * CVE-2024-0133: data tampering in host file system via specially crafted container image (bsc#1231032). Other updates and bugfixes: * updated to 1.18.0 * Add clock_gettime to allowed syscalls * Fix pointer accessing local variable out of scope * Require version match between libnvidia-container-tools and libnvidia- container1 * Add libnvidia-gpucomp.so to the list of compute libs * Use VERSION_ prefix for version parts in makefiles * Add additional logging * Do not discard container flags when --cuda-compat-mode is not specified * Remove unneeded --no-cntlibs argument from list command * Add cuda-compat-mode flag to configure command * Skip files when user has insufficient permissions *

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-558=1 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-558=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-558=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-558=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-558=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-558=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch Read the Full Advisory

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-SLE-15.6-2026-558=1

* Containers Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-558=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-558=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-558=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-558=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-558=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

* openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * libnvidia-container1-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container-devel-1.18.0-150200.5.9.1 * libnvidia-container-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container1-1.18.0-150200.5.9.1 * libnvidia-container-debugsource-1.18.0-150200.5.9.1 * libnvidia-container-tools-1.18.0-150200.5.9.1 * libnvidia-container-tools-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container-static-1.18.0-150200.5.9.1 * Containers Module 15-SP7 (aarch64 ppc64le x86_64) * libnvidia-container1-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container-devel-1.18.0-150200.5.9.1 * libnvidia-container-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container1-1.18.0-150200.5.9.1 * libnvidia-container-debugsource-1.18.0-150200.5.9.1 * libnvidia-container-tools-1.18.0-150200.5.9.1 * libnvidia-container-tools-debuginfo-1.18.0-150200.5.9.1 * libnvidia-container-static-1.18.0-150200.5.9.1 * SUSE Linux Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le x86_64)

* libnvidia-container1-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container-devel-1.18.0-150200.5.9.1

* libnvidia-container-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container1-1.18.0-150200.5.9.1

* libnvidia-container-debugsource-1.18.0-150200.5.9.1

* libnvidia-container-tools-1.18.0-150200.5.9.1

* libnvidia-container-tools-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container-static-1.18.0-150200.5.9.1

* Containers Module 15-SP7 (aarch64 ppc64le x86_64)

* libnvidia-container1-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container-devel-1.18.0-150200.5.9.1

* libnvidia-container-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container1-1.18.0-150200.5.9.1

* libnvidia-container-debugsource-1.18.0-150200.5.9.1

* libnvidia-container-tools-1.18.0-150200.5.9.1

* libnvidia-container-tools-debuginfo-1.18.0-150200.5.9.1

* libnvidia-container-static-1.18.0-150200.5.9.1

* bsc#1231032 * bsc#1231033 ## References: * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Release Security Updates for libnvidia-container SUSE and openSUSE have released important security updates for the libnvidia-container, addressing vulnerabilities identified as CVE-2024-0132 and CVE-2024-0133. These vulnerabilities include a TOCTOU race condition and data tampering risks via specially crafted container images, affecting users of both distributions. The updates include enhancements and bug fixes, with the libnvidia-container updated to version 1.18.0. 2 sources 22

Extracted Entities

CVEs (2)

CVE-2024-0132 CVE-2024-0133

Domains (1)

libnvidia-gpucomp.so