Intel Gaudi / gaudi-container-runtime: A path-traversal bug in the container runtime shim that wires Gaudi devices into
Impact
A path-traversal bug in the container runtime shim that wires Gaudi devices into containers lets a tenant who controls the container spec cause the runtime to touch host paths outside the container root. On a shared Gaudi box the runtime executes as root on the host, so this is the classic accelerator-runtime escape shape: tenant container -> host filesystem -> every other tenant's job on that node.
Who can reach it
Any tenant who can launch a container on a Gaudi node through the normal scheduler. No host account and no physical access required - the container spec is the attack surface.
What to do
Upgrade gaudi-container-runtime to 1.24.0 or later across every Gaudi node. This is a host-side userspace package, so no BIOS, firmware or microcode update is involved, but the runtime binary is in the path of every new container start - roll it per node and restart the container engine, which means draining running jobs on that node.
References
Related entries
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper access control in the escape handler leaks informationCVE-2021-1055 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An off-by-one error in nvidia.ko permits data tamperingCVE-2022-34684 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko givesCVE-2022-42254 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A second out-of-bounds array access path in nvidia.koCVE-2022-42255 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in index validation defeatsCVE-2022-42256 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
- NVIDIA GPU Display Driver (nvidia.ko): integer overflow in the kernel mode layer reachable by a local GPU userCVE-2022-42257 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.