{"id":"CVE-2024-0134","aliases":["AZL-52393","AZL-52452","EUVD-2024-15933","GHSA-7jm9-xpwx-v999","SUSE-SU-2025:4187-1"],"status":"published","title":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a...","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","severity":{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00391,"percentile":0.33464,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-61"],"published":"2024-11-05T18:37:31Z","modified":"2026-06-17T06:52:50Z","fixes":[{"ecosystem":"Azure Linux:2","package":"nvidia-container-toolkit","fixed_in":["1.17.1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nvidia-container-toolkit","fixed_in":["1.17.1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9}],"products":[{"vendor":"nvidia","product":"nvidia container toolkit"},{"vendor":"nvidia","product":"nvidia gpu operator"},{"vendor":"nvidia","product":"nvidia_container_toolkit"},{"vendor":"nvidia","product":"nvidia_gpu_operator"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5585","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0134","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7jm9-xpwx-v999"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254187-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231032","tags":["report"]},{"url":"https://bugzilla.suse.com/1231033","tags":["report"]},{"url":"https://bugzilla.suse.com/1232855","tags":["report"]},{"url":"https://bugzilla.suse.com/1236496","tags":["report"]},{"url":"https://bugzilla.suse.com/1236497","tags":["report"]},{"url":"https://bugzilla.suse.com/1236498","tags":["report"]},{"url":"https://bugzilla.suse.com/1237085","tags":["report"]},{"url":"https://bugzilla.suse.com/1246614","tags":["report"]},{"url":"https://bugzilla.suse.com/1246860","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23359","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-0134","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T18:37:31.699Z","modified":"2024-11-05T18:52:00.366Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-15933","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T18:37:31Z","modified":"2024-11-05T18:52:00Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:10.508802Z"}],"ghsa":[{"id":"GHSA-7jm9-xpwx-v999","title":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a...","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T21:30:43Z","modified":"2024-11-05T21:30:43Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:58:44.254109Z"}],"nvd":[{"id":"CVE-2024-0134","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T19:15:05.203Z","modified":"2026-06-17T06:52:50.893Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:10:35.864552Z"}],"osv":[{"id":"AZL-52393","title":"CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T19:15:05Z","modified":"2026-04-21T04:33:25.548826Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-52452","title":"CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1","description":"NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","status":"published","published":"2024-11-05T19:15:05Z","modified":"2026-04-21T04:53:33.308955Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:06.595149Z"},{"id":"SUSE-SU-2025:4187-1","title":"Security update for nvidia-container-toolkit","description":"This update for nvidia-container-toolkit fixes the following issues:\n\n- Update to version 1.18.0:\n  - This is a major release and includes the following high-level changes:\n    - The default mode of the NVIDIA Container Runtime has been updated to make use\n      of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.\n    - Added a systemd unit to generate CDI specifications for available devices automatically. This allows\n      native CDI support in container engines such as Docker and Podman to be used without additional steps.\n  \n- Security issues fixed:\n  - CVE-2024-0133: Fixed data tampering in host file system via specially\n    crafted container image (bsc#1231032)\n  - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition\n    in default configuration via specifically crafted container image\n    (bsc#1231033)\n  - CVE-2024-0134: Fixed specially-crafted container image can lead to\n    the creation of unauthorized files on the host (bsc#1232855)\n  - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236496)\n  - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236497)\n  - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236498)\n  - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit\n    (bsc#1237085)\n  - CVE-2025-23267: Fixed link following can lead to container escape\n    (bsc#1246614)\n  - CVE-2025-23266: Fixed hook initialization might lead to escalation\n    of privileges (bsc#1246860)\n","status":"published","published":"2025-11-24T07:58:47Z","modified":"2026-03-23T04:51:27.139721Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}