NVIDIA Product Security Update Advisory (CVE-2024-0132)
Overview
An update has been released to address vulnerabilities in NVIDIA Product. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-0132
- NVIDIA Container Toolkit versions: ~ 1.16.1 (inclusive) (Linux)
Resolved Vulnerabilities
Time-of-check Time-of-Use vulnerability (CVE-2024-0132) that allows specially crafted container images to access the host file system
Vulnerability Patches
The following product-specific Vulnerability Patches have been made available with the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-0132
- NVIDIA Container Toolkit version: 1.16.2
References
[1] Security Bulletin: NVIDIA Container Toolkit – September 2024