Executive brief
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit
Affected products
- Go github.com/NVIDIA/nvidia-container-toolkit
Junglewise Threat Intelligence
CVE-2024-0132: GO-2024-3239 - NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit
CVE-2024-0132 · Severity: low · CVSS 3.1 · Published 2024-11-04
Technologies: github.com/NVIDIA/nvidia-container-toolkit (Go). Vendors: Go.
Related threats
- GO-2025-3998 - NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
- GO-2025-3992 - NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
- GO-2024-3237 - NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia
- Duplicate Advisory: NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system
- Duplicate Advisory: NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability