Executive brief
Duplicate Advisory: NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system
Affected products
- Go github.com/NVIDIA/nvidia-container-toolkit
Junglewise Threat Intelligence
Duplicate Advisory: NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system
Severity: low · CVSS 3.1 · Published 2024-09-26
Technologies: github.com/NVIDIA/nvidia-container-toolkit (Go). Vendors: Go.
Related threats
- GO-2025-3998 - NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
- GO-2025-3992 - NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
- GO-2024-3237 - NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia
- GO-2024-3239 - NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit
- Duplicate Advisory: NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability