Improper Isolation Vulnerability in NVIDIA Container Toolkit
CVE-2024-0137
Key Information:
- Vendor
Nvidia
- Vendor
- CVE Published:
- 28 January 2025
What is CVE-2024-0137?
The NVIDIA Container Toolkit exhibits an improper isolation vulnerability due to misconfigured container settings. When a specially crafted container image is introduced, it could allow untrusted code to execute within the host's network namespace. This vulnerability is particularly concerning when the toolkit is set up in non-standard configurations. Its exploitation may potentially result in denial of service and unauthorized escalation of privileges, impacting the overall security posture of the systems utilizing the toolkit.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
NVIDIA Container Toolkit Linux All versions up to and including v1.17.0
NVIDIA GPU Operator Linux All versions up to and including 24.9.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved