Container Toolkit / GPU Operator: Host DoS / info disclosure

CVSS 5.5CVE-2024-0137NVIDIA / GPU stackcurated

Impact

Host DoS / info disclosure

Who can reach it

Any tenant with a container

What to do

Bump toolkit + restart runtime

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0137 https://github.com/NVIDIA/product-security/tree/main/2025/5599

Related entries

Container Toolkit / GPU Operator: Unauthorized file creation on the host (data tampering)CVE-2024-0134 · Container Toolkit / GPU OperatorMedium
Container Toolkit / GPU Operator: Container escape to host root (insufficient input validation)CVE-2024-0135 · Container Toolkit / GPU OperatorHigh
Container Toolkit / GPU Operator: Container escape to host (insufficient input validation)CVE-2024-0136 · Container Toolkit / GPU OperatorHigh
GPU Display Driver: DoS (use-after-free)CVE-2024-0147 · GPU Display DriverMedium
Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreCVE-2024-26647 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreCVE-2024-26648 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.