Improper Isolation in NVIDIA Container Toolkit Exposes Host Binary to Risks

CVE-2024-0135

What is CVE-2024-0135?

The NVIDIA Container Toolkit exhibits an improper isolation vulnerability that can be exploited through specially crafted container images. This weakness may allow attackers to modify host binaries, potentially leading to a range of security risks including unauthorized code execution, denial of service, privilege escalation, information disclosure, and data tampering. Organizations leveraging the toolkit are urged to apply the latest updates to mitigate these threats.

References