Container Toolkit / GPU Operator: Container escape to host root (insufficient input validation)

CVSS 7.6CVE-2024-0135NVIDIA / GPU stackcurated

Impact

Container escape to host root (insufficient input validation)

Who can reach it

Any tenant that can run a container image on a GPU node

What to do

Bump nvidia-container-toolkit package + restart containerd/docker; upgrade GPU Operator Helm chart; evict running tenant containers

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0135 https://github.com/NVIDIA/product-security/tree/main/2025/5599

Related entries

Container Toolkit / GPU Operator: Container escape to host (insufficient input validation)CVE-2024-0136 · Container Toolkit / GPU OperatorHigh
Container Toolkit / GPU Operator: Host DoS / info disclosureCVE-2024-0137 · Container Toolkit / GPU OperatorMedium
Container Toolkit / GPU Operator: Unauthorized file creation on the host (data tampering)CVE-2024-0134 · Container Toolkit / GPU OperatorMedium
IGX Orin bootloader: Improper access control in bootloaderCVE-2024-0148 · IGX Orin bootloaderHigh
NeMo Framework: RCE via insecure deserializationCVE-2025-23249 · NeMo FrameworkHigh
NeMo Framework: Arbitrary file write/read via path traversalCVE-2025-23250 · NeMo FrameworkHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.