CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 是我向 NVIDIA PSIRT 提交的一个漏洞。个人认为，在多租户 HPC 集群（尤其是云机器学习平台）中，它可能导致较高的安全风险。 本仓库简单地演示了该漏洞在由 nvidia-container-runtime 创建的 GPU 容器中的表现。 工作原理 通过创建特定的字符设备文件，GPU 容器（由 nvidia-container-runtime 创建的容器）中的攻击者能够访问宿主机上所有的 GPU 设备。 该漏洞同样适用于在 Kubernetes 集群上由 k8s-device-plugin 创建的 GPU Pod。 前提条...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, syft, cluster-autoscaler-fips, opentelemetry-collector-contrib-fips, kubernetes-fips, kubernetes, cadvisor-fips, k8s-device-plugin, runc, grafana-alloy, eks-distro-fips, opentelemetry-collector-contrib, k3s, neuvector-scanner-fips, cadvisor,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: grafana-alloy, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, buildah, k3s, kubernetes, podman, falco-no-driver...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, buildah, cadvisor, podman...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: syft, grafana-alloy, k8s-device-plugin, neuvector-scanner, buildah, cadvisor, docker, grype, k3s, runc, ctop, kubernetes, opentelemetry-collector-contrib, podman...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, argocd-image-updater, k8s-device-plugin, kubeflow-pipelines, kubernetes-csi-driver-hostpath, spark-operator, nodetaint, local-static-provisioner, aws-efs-csi-driver, cri-tools...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, k3s, gitness, runc, aws-load-balancer-controller, fuse-overlayfs-snapshotter...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, argocd-image-updater, k8s-device-plugin, kubeflow-pipelines, nodetaint, local-static-provisioner, aws-efs-csi-driver...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, k3s, gitness, runc, aws-load-balancer-controller, fuse-overlayfs-snapshotter...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, prometheus-operator, redka, snyk-cli, falco-no-driver, istio, kots, zot, external-secrets-operator, cilium, aws-flb-firehose, dask-gateway, kine, go, fscrypt, gitaly, mattermost, aws-flb-kinesis, nerdctl, libnvidia-container, cert-manager, chezmoi...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, gpu-operator-fips, cadvisor-fips, nvidia-container-toolkit, k8s-device-plugin, node-feature-discovery-fips, prometheus-podman-exporter-fips, cadvisor, podman, prometheus-podman-exporter, nvidia-container-toolkit-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, gpu-operator-fips, cadvisor-fips, nvidia-container-toolkit, k8s-device-plugin, node-feature-discovery-fips, prometheus-podman-exporter-fips, cadvisor, podman, prometheus-podman-exporter, nvidia-container-toolkit-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, buildah, cadvisor, podman...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, buildah, cadvisor, podman...

containerd CRI checkpoint restore CDI annotation smuggling

Impact containerd's CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive...