NVIDIA Container Toolkit TOCTOU container escape (CVE-2024-0132)
Date: 2024
Affected: NVIDIA Container Toolkit <=1.16.1
Attack vector: sandbox-escape
Category: vulnerability-disclosure
Severity: Critical

NVIDIA Container Toolkit 1.16.1 and earlier contain a Time-of-check-Time-of-use (TOCTOU) vulnerability in default configuration: a crafted container image may gain access to the host file system.


Mitigations:

Architectural layers (MAESTRO):