Patch now: Critical Nvidia bug allows container escape, complete host takeover
ID: ee61fb34-48ce-5754-bb7f-2171cb5fa8ff
STIX ID: report--ee61fb34-48ce-5754-bb7f-2171cb5fa8ff
Feed Name: The Register (Security)
Threat Score
Nvidia patched CVE-2024-0132, a critical TOCTOU vulnerability in its Container Toolkit and GPU Operator that can be exploited via a malicious GPU-enabled container to escape the container and gain control of the host; Wiz reports about 33% of cloud environments still run vulnerable versions, and while fixes are available the issue poses high risk to shared GPU and AI hosting environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.