CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 هي ثغرة أمنية قمت بإرسالها إلى NVIDIA PSIRT. شخصياً، قد تؤدي إلى مخاطر أمنية عالية في مجموعات HPC متعددة المستأجرين، خاصة في منصات التعلم الآلي السحابية. هذا المستودع يوضح ببساطة الثغرة في حاويات GPU التي تم إنشاؤها بواسطة nvidia-container-runtime. كيف يعمل من خلال إنش...

CVE-2026-84304 affecting package sriov-network-device-plugin for versions less than 3.7.0-8

CVE-2026-84304 affecting package sriov-network-device-plugin for versions less than 3.7.0-8. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package sriov-network-device-plugin for versions less than 3.7.0-8

CVE-2026-84445 affecting package sriov-network-device-plugin for versions less than 3.7.0-8. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-ON51112 Security fix for CVE-2025-27612 applied in: nvidia-device-plugin 0.19.2-r1

Security vulnerability affects the nvidia-device-plugin package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101299

Security vulnerability affects the nvidia-device-plugin package. This issue is resolved in later releases. See references for vulnerability details...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cadvisor-fips, cluster-autoscaler, neuvector-scanner-fips, ctop, eks-distro-fips, eks-distro, neuvector-scanner, kubernetes, k3s, grype, neuvector-fips, neuvector, runc, podman, opentelemetry-collector-contrib-fips, grafana-alloy-fips,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: docker, grype, buildah, neuvector-scanner, podman, k3s, runc, cadvisor, ctop, kubernetes, syft, opentelemetry-collector-contrib, grafana-alloy, k8s-device-plugin...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, buildah, podman, sriov-network-device-plugin, falco-no-driver, node-feature-discovery, cadvisor, k8s-device-plugin...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, buildah, podman, sriov-network-device-plugin, k3s, falco-no-driver, node-feature-discovery, kubernetes, grafana-alloy...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, wuzz, k3s, runc, aws-load-balancer-controller, k8s-device-plugin...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, wuzz, k3s, runc, aws-load-balancer-controller, k8s-device-plugin...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, argocd-image-updater, kubernetes-dns-node-cache, local-static-provisioner, cri-tools, nodetaint, kubernetes-csi-driver-hostpath, kubeflow-pipelines, spark-operator, aws-efs-csi-driver, k8s-device-plugin...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, argocd-image-updater, kubernetes-dns-node-cache, local-static-provisioner, nodetaint, kubeflow-pipelines, aws-efs-csi-driver, k8s-device-plugin...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, external-secrets-operator, aws-flb-firehose, cilium, mattermost, coredns, kubernetes-dashboard, fscrypt, ingress-nginx-controller, aws-flb-kinesis, argo-cd, kubernetes, kubescape, gitaly, istio, prometheus, kaf, telegraf, kyverno,...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, rancher-agent, cadvisor-fips, rancher, sriov-network-device-plugin-fips, gpu-operator-fips, nvidia-container-toolkit, falco-no-driver, podman, sriov-network-device-plugin, prometheus-podman-exporter, podman-fips, buildah-fips,...