Nvidia Product Security Update Advisory

Overview

We have released security updates to fix vulnerabilities in Nvidia products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2024-0112

Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series) Version: ~36.4 (excluded)
Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series) version: ~35.6 (excluding)
IGX Orin version: ~1.1 (excluded)

 

CVE-2025-23359

NVIDIA Container Toolkit Version: ~1.17.3 (included)
NVIDIA GPU Operator Version: ~24.9.1 (included)

 

 

Resolved Vulnerabilities

Lack of input validation vulnerability that could allow privilege escalation (CVE-2024-0112)
Vulnerability that could allow a crafted container image to access the host file system (CVE-2025-23359)

 

 

Vulnerability Patches

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

 

CVE-2024-0112

Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series) Version: ~36.4 (excluding)
Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series) version: ~35.6 (excluding)
IGX Orin version: ~1.1 (excluded)

 

CVE-2025-23359

NVIDIA Container Toolkit Version: ~1.17.4
NVIDIA GPU Operator Version: ~24.9.2

 

 

References

[1] Security Bulletin: NVIDIA Jetson AGX Orin Series and NVIDIA IGX Orin – February 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5611
[2] Security Bulletin: NVIDIA Container Toolkit – 11 February 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5616