CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a...
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
CVE-2024-0134- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-61
- Updated
- 2026-11-02
EUVDEUVD-2024-15933
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
EUVD-2024-15933- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7jm9-xpwx-v999
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a...
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
GHSA-7jm9-xpwx-v999- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-61
- Updated
- 2026-11-02
NVD
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
CVE-2024-0134- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-61
- Updated
- 2026-11-02
OSVAZL-52393
CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
AZL-52393- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
OSVAZL-52452
CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
- Record
AZL-52452- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2025:4187-1 No score
Security update for nvidia-container-toolkit
This update for nvidia-container-toolkit fixes the following issues:
-
Update to version 1.18.0:
- This is a major release and includes the following high-level changes:
- The default mode of the NVIDIA Container Runtime has been updated to make use of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.
- Added a systemd unit to generate CDI specifications for available devices automatically. This allows native CDI support in container engines such as Docker and Podman to be used without additional steps.
- This is a major release and includes the following high-level changes:
-
Security issues fixed:
- CVE-2024-0133: Fixed data tampering in host file system via specially crafted container image (bsc#1231032)
- CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition in default configuration via specifically crafted container image (bsc#1231033)
- CVE-2024-0134: Fixed specially-crafted container image can lead to the creation of unauthorized files on the host (bsc#1232855)
- CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236496)
- CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236497)
- CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in NVIDIA Container Toolkit (bsc#1236498)
- CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit (bsc#1237085)
- CVE-2025-23267: Fixed link following can lead to container escape (bsc#1246614)
- CVE-2025-23266: Fixed hook initialization might lead to escalation of privileges (bsc#1246860)
- Record
SUSE-SU-2025:4187-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-container-toolkitAzure Linux:2 |
before 1.17.1-1 | 1.17.1-1 |
nvidia-container-toolkitAzure Linux:3 |
before 1.17.1-1 | 1.17.1-1 |
nvidia-container-toolkitSUSE:Linux Enterprise Module for Containers 15 SP6 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Module for Containers 15 SP7 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-container-toolkitSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitSUSE:Enterprise Storage 7.1 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
nvidia-container-toolkitopenSUSE:Leap 15.6 From an advisory covering 9 CVEs |
before 1.18.0-150200.5.17.1 | 1.18.0-150200.5.17.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-0134 is a medium vulnerability (CVSS 4.1) in Nvidia Container Toolkit, published November 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in nvidia-container-toolkit 1.17.1-1.
References
nvidia.custhelp.com/app/answers/detail/a_id/5585
nvd.nist.gov/vuln/detail/CVE-2024-0134
github.com/advisories/GHSA-7jm9-xpwx-v999
suse.com/support/update/announcement/2025/suse-su-20254187-1
bugzilla.suse.com/1231032
Show 16 moreShow less