| Package | Affected versions | Patched versions |
|---|---|---|
| nvidia container toolkit | < 1.17.3 | 1.17.3 |
| nvidia gpu operator | < 24.9.1 | 24.9.1 |
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free