NVIDIA Container Toolkit and GPU Operator vulnerability (CVE-2024-0132) allows container escape, risking data breaches and unauthorized access.

A critical vulnerability (CVE-2024-0132) in NVIDIA's Container Toolkit and GPU Operator threatens AI applications in cloud and on-premises settings. The flaw allows attackers to escape container environments, risking data breaches and unauthorized access to sensitive systems. NVIDIA released patches on September 26, 2024, urging users to update to toolkit version 1.16.2 and GPU Operator version 24.6.2, especially for systems using untrusted container images.

September 30, 2024
4 Articles

Further Reading