I have a container that contains some vendor-provided software used to support GPU-driven machine learning in a high performance cluster. This vendor didn’t do

I have a container that contains some vendor-provided software used to support GPU-driven machine learning in a high performance cluster. This vendor didn’t do the cleanest build ever, and so the package they supply installs kernel headers. Based on those headers, the container scanner is convinced that my container is vulnerable to many exciting things, like Atheros WiFi chipset driver vulnerabilities.