Gpu operator fips: Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1
Affects gpu-operator-fipsSource GCVE Database
Fixed in 25.10.0-r1 : update gpu-operator-fips when convenient.
Data as of 09/09/2026, 13:46:39 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 25.10.0-r1
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartgpu-operator-fips | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to version 25.10.0-r1 or later of the gpu-operator-fips package to apply the security fixes. Since patchAvailable is true and this version contains the fixes, applying this update mitigates the vulnerabilities.
Description
Multiple security vulnerabilities were identified in the gpu-operator-fips package and have been addressed in version 25.10.0-r1. These issues affect the specified version and have been resolved in later releases. No active exploits are known in the wild.
Impact
The vulnerabilities potentially exposed the gpu-operator-fips package to security risks prior to version 25.10.0-r1. Since no known exploits are reported in the wild and no detailed impact information is provided, the exact impact remains unspecified but the presence of multiple vulnerabilities indicates a security risk that warranted patching.
Summary
The gpu-operator-fips package contained multiple security vulnerabilities referenced by GHSA identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. These vulnerabilities have been fixed in version 25.10.0-r1. The details of the individual vulnerabilities are available through the referenced advisories. No CVSS score or detailed impact metrics are provided in the available data.