NVIDIA Container Toolkit TOCTOU Vulnerability Allowing Host File System Access

A Time-of-Check Time-of-Use (TOCTOU) vulnerability has been identified in the NVIDIA Container Toolkit for Linux, all versions prior to and including 1.17.3. When used with the default configuration, a crafted container image could access the host file system. Exploitation of this vulnerability could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

Impact

Exploitation could result in unauthorized code execution, disruption of services, elevated privileges, unauthorized information access, and unauthorized data modification.

Remediation

Users should update to NVIDIA Container Toolkit version 1.17.4 or later. For those using the NVIDIA GPU Operator, the updated version is 24.9.2. Instructions for updating can be found in the NVIDIA Container Toolkit and NVIDIA GPU Operator documentation.