CVE-2024-0135: High severity nvidia container toolkit vulnerability
Published Jan 28, 2025
·Updated
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected Software
4 affected components
Nvidia Container Toolkit
All of the following
Any of the following
Nvidia NVIDIA Container Toolkit<1.17.3
Nvidia NVIDIA GPU Operator<24.9.1
Linux Linux kernel
Event History
Jan 28, 2025
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
How can I mitigate the risks associated with CVE-2024-0135?
To mitigate the risks of CVE-2024-0135, avoid using untrusted container images and ensure your NVIDIA Container Toolkit is up to date.