CVE-2026-24260: Nvidia Update Ldcache Toctou

Returning UpdateLDCacheHook without pairing it with CreateSonameSymlinksHook leaves the container susceptible to TOCTOU symlink attacks within ldconfig.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-24260-nvidia-update-ldcache-toctou --engine opengrep

Description

Returning UpdateLDCacheHook without pairing it with CreateSonameSymlinksHook leaves the container susceptible to TOCTOU symlink attacks within ldconfig.