CVE-2024-0135

CVE-2024-0135 describes an improper isolation vulnerability within the NVIDIA Container Toolkit, affecting various Linux distributions and NVIDIA products including the Container Toolkit and GPU Operator. This high-severity vulnerability (CVSS 7.6) can be exploited by a specially crafted container image, potentially leading to remote code execution, denial of service, privilege escalation, information disclosure, and data tampering. While the attack complexity is high and user interaction is required, the potential impact is significant. Currently, there is no evidence of active exploitation, nor are there public exploits available in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion and media coverage.