Container Toolkit / GPU Operator: Container escape to host (insufficient input validation)
CVSS 7.6CVE-2024-0136NVIDIA / GPU stackcurated
Impact
Container escape to host (insufficient input validation)
Who can reach it
Any tenant with a container
What to do
Bump toolkit + restart runtime; upgrade GPU Operator chart; evict tenants
References
Related entries
- Container Toolkit / GPU Operator: Host DoS / info disclosureCVE-2024-0137 · Container Toolkit / GPU OperatorMedium
- Container Toolkit / GPU Operator: Unauthorized file creation on the host (data tampering)CVE-2024-0134 · Container Toolkit / GPU OperatorMedium
- Container Toolkit / GPU Operator: Container escape to host root (insufficient input validation)CVE-2024-0135 · Container Toolkit / GPU OperatorHigh
- IGX Orin bootloader: Improper access control in bootloaderCVE-2024-0148 · IGX Orin bootloaderHigh
- NeMo Framework: RCE via insecure deserializationCVE-2025-23249 · NeMo FrameworkHigh
- NeMo Framework: Arbitrary file write/read via path traversalCVE-2025-23250 · NeMo FrameworkHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.