{"id":"CVE-2024-0137","aliases":["EUVD-2024-15936","GHSA-frhw-w3wm-6cw4","SUSE-SU-2025:4187-1"],"status":"published","title":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted...","description":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00328,"percentile":0.26042,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-653"],"published":"2025-01-28T03:10:36Z","modified":"2026-06-17T06:52:51Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"nvidia-container-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-150200.5.17.1"}]}],"bundled":9}],"products":[{"vendor":"nvidia","product":"nvidia container toolkit"},{"vendor":"nvidia","product":"nvidia gpu operator"},{"vendor":"nvidia","product":"nvidia_container_toolkit"},{"vendor":"nvidia","product":"nvidia_gpu_operator"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5599","tags":["Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0137"},{"url":"https://github.com/advisories/GHSA-frhw-w3wm-6cw4"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254187-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231032","tags":["report"]},{"url":"https://bugzilla.suse.com/1231033","tags":["report"]},{"url":"https://bugzilla.suse.com/1232855","tags":["report"]},{"url":"https://bugzilla.suse.com/1236496","tags":["report"]},{"url":"https://bugzilla.suse.com/1236497","tags":["report"]},{"url":"https://bugzilla.suse.com/1236498","tags":["report"]},{"url":"https://bugzilla.suse.com/1237085","tags":["report"]},{"url":"https://bugzilla.suse.com/1246614","tags":["report"]},{"url":"https://bugzilla.suse.com/1246860","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23359","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-0137","description":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.","status":"published","published":"2025-01-28T03:10:36.813Z","modified":"2025-01-28T15:15:38.917Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-653"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-15936","description":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.","status":"published","published":"2025-01-28T03:10:36Z","modified":"2025-01-28T15:15:38Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-frhw-w3wm-6cw4","title":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted...","description":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.","status":"published","published":"2025-01-28T03:31:14Z","modified":"2025-01-28T03:31:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-653"],"updated_at":"2026-11-02T14:59:42.234766Z"}],"nvd":[{"id":"CVE-2024-0137","description":"NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.","status":"published","published":"2025-01-28T03:15:07.567Z","modified":"2026-06-17T06:52:51.247Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-653"],"updated_at":"2026-11-02T14:10:43.581383Z"}],"osv":[{"id":"SUSE-SU-2025:4187-1","title":"Security update for nvidia-container-toolkit","description":"This update for nvidia-container-toolkit fixes the following issues:\n\n- Update to version 1.18.0:\n  - This is a major release and includes the following high-level changes:\n    - The default mode of the NVIDIA Container Runtime has been updated to make use\n      of a just-in-time-generated CDI specification instead of defaulting to the legacy mode.\n    - Added a systemd unit to generate CDI specifications for available devices automatically. This allows\n      native CDI support in container engines such as Docker and Podman to be used without additional steps.\n  \n- Security issues fixed:\n  - CVE-2024-0133: Fixed data tampering in host file system via specially\n    crafted container image (bsc#1231032)\n  - CVE-2024-0132: Fixed time-of-check time-of-use (TOCTOU) race condition\n    in default configuration via specifically crafted container image\n    (bsc#1231033)\n  - CVE-2024-0134: Fixed specially-crafted container image can lead to\n    the creation of unauthorized files on the host (bsc#1232855)\n  - CVE-2024-0135: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236496)\n  - CVE-2024-0136: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236497)\n  - CVE-2024-0137: Fixed Improper Isolation or Compartmentalization in\n    NVIDIA Container Toolkit (bsc#1236498)\n  - CVE-2025-23359: Fixed TOCTOU Vulnerability in NVIDIA Container Toolkit\n    (bsc#1237085)\n  - CVE-2025-23267: Fixed link following can lead to container escape\n    (bsc#1246614)\n  - CVE-2025-23266: Fixed hook initialization might lead to escalation\n    of privileges (bsc#1246860)\n","status":"published","published":"2025-11-24T07:58:47Z","modified":"2026-03-23T04:51:27.139721Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}