| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/NVIDIA/nvidia-container-toolkit | < 1.16.2 | 1.16.2 |
| nvidia container toolkit | < 1.16.2 | 1.16.2 |
| nvidia gpu operator | < 24.6.2 | 24.6.2 |
NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free