NVIDIA SNAP-4 Container VIRTIO-BLK Component Out-of-Range Pointer Vulnerability Leading to Denial-of-Service

A vulnerability exists in the VIRTIO-BLK component of NVIDIA SNAP-4 Container, where a malicious guest VM can exploit out-of-range pointer offsets by sending crafted messages. This exploitation may cause a denial-of-service condition on the DPA, disrupting storage availability for other VMs.

Impact

Exploitation leads to a denial-of-service condition on the DPA, causing storage unavailability for other VMs.

Remediation

Users can upgrade to NVIDIA SNAP-4.9.1 or SNAP-4.5.5 to address this vulnerability.