| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/NVIDIA/gpu-operator | < 25.3.2all versions | 25.3.2 |
| github.com/NVIDIA/k8s-device-plugin | < 0.17.3 | 0.17.3 |
| github.com/NVIDIA/mig-parted | < 0.12.2 | 0.12.2 |
| github.com/NVIDIA/nvidia-container-toolkit | < 1.17.8 | 1.17.8 |
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free