CyberzSOC

NVIDIA Container Toolkit is providing containerised AI applications with access to GPU resources. This vulnerability impacts any AI application that is running the vulnerable container toolkit to enable GPU support. This vulnerability could allow a rogue user or software to escape their containers and ultimately take complete control of the underlying host [1]. The vulnerability CCVE-2024-0132 has a CVSS score of 9.0 out of 10. It is a Time-ofCheck/Time-of-Use (TOC/TOU) vulnerability, a type of race condition.