Gpu operator: Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1
Affects gpu-operatorSource GCVE Database
Fixed in 25.10.0-r1 : update gpu-operator when convenient.
Data as of 09/09/2026, 13:41:34 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 25.10.0-r1
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartgpu-operator | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available in version 25.10.0-r1. Users should update to this version to address the security vulnerabilities. No additional mitigation steps are indicated by the vendor advisory.
Description
Multiple security vulnerabilities were identified in the gpu-operator package. These issues have been addressed and fixed in version 25.10.0-r1. No CVSS score is provided, and no known exploits are reported in the wild. Users should update to the fixed version to remediate the vulnerabilities.
Impact
The vulnerabilities could potentially allow security issues within the gpu-operator package, but specific impacts are not detailed. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time.
Summary
The gpu-operator package contained multiple security vulnerabilities referenced as GHSA-F6X5-JH6R-WRFV and GHSA-J5W8-Q4QC-RX2X. These vulnerabilities have been resolved in version 25.10.0-r1. No detailed technical information or CVSS scores are available, and no active exploitation has been reported. The package is not a cloud service, so remediation requires updating the software to the fixed version.