CVE-2024-0136

CVE-2024-0136 is an improper isolation vulnerability in the NVIDIA Container Toolkit, affecting Linux systems utilizing NVIDIA Container Toolkit, NVIDIA GPU Operator, and the Linux kernel. This high-severity vulnerability (CVSS 8.4) allows a specially crafted container image to gain read and write access to host devices, potentially leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering, but only when the toolkit is non-default configured. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage.