Security Bulletin: NVIDIA Container Toolkit - November 2024

NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...

CVE-2024-0134: UNIX Symbolic Link (Symlink) Following

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

GHSA-MJJW-553X-87PQ vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

NVIDIA Container Toolkit Privilege Escalation

The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the assignment of a zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a malicious actor to enhanc...

GHSA-536J-XXHG-6PGG vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, gpu-operator...

GHSA-G4PJ-MX9F-M2MH vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, gpu-operator...

CVE-2024-0133 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

CVE-2024-0132 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

Security Bulletin: NVIDIA Container Toolkit - September 2024

NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...

GHSA-QV35-3GW6-8Q4J vulnerabilities

Vulnerabilities for packages: guac...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, argo-workflows-fips, pulumi-kubernetes-operator, amass, tigera-operator-fips, volume-modifier-for-k8s, local-path-provisioner, doppler-kubernetes-operator, flux-helm-controller, configmap-reload-fips, bank-vaults-fips,...