What is the CVSS score of CVE-2024-0135?

CVE-2024-0135 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nvidia Container Toolkit are affected by CVE-2024-0135?

Organizations using NVIDIA Container Toolkit face notable risk from CVE-2024-0135 rated CVSS 7.6. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2024-0135?

Within 30 days: Identify all affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Nvidia Container Toolkit CVE-2024-0135

HIGH

Improper Isolation or Compartmentalization (CWE-653)

2025-01-28 psirt@nvidia.com

RCE Information Disclosure Nvidia Denial Of Service Nvidia Container Toolkit Nvidia Gpu Operator Red Hat Suse

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

7.6 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 02, 2026 - 08:30 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 18:06 vuln.today

CVE Published

Jan 28, 2025 - 03:15 nvd

HIGH 7.6

DescriptionCVE.org

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

AnalysisAI

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-653. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Affected products include: Nvidia Nvidia Container Toolkit, Nvidia Nvidia Gpu Operator.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nvidia Container Toolkit

View all

CVE-2025-23359 HIGH This Week POC

8.3 Feb 12

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co

CVE-2024-0132 HIGH This Week POC

8.3 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de

CVE-2024-0134 MEDIUM This Month

4.1 Nov 05

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted contai

CVE-2024-0133 LOW Monitor

3.4 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a speciall

CVE-2024-0137 MEDIUM This Month

5.5 Jan 28

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

CVE-2024-0136 HIGH This Month

7.6 Jan 28

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

Same weakness CWE-653 – Improper Isolation or Compartmentalization

View all

CVE-2025-1974 CRITICAL POC

9.8

CVE-2025-21590 MEDIUM

6.7

CVE-2024-33768 CRITICAL POC

9.8

CVE-2025-34201 HIGH POC

8.5

CVE-2024-23683 HIGH POC

8.2

CVE-2023-1305 HIGH POC

8.1

CVE-2026-4692 CRITICAL

10.0

CVE-2024-35425 MEDIUM POC

5.5

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2025-53770 CRITICAL POC

9.8

CVE-2020-7961 CRITICAL POC

9.8

Vendor StatusVendor

SUSE

Severity: High

Product	Status
SUSE Enterprise Storage 7.1	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Fixed

CVE-2024-0135 vulnerability details – vuln.today

Back

Nvidia Container Toolkit CVE-2024-0135

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Nvidia Container Toolkit

Same weakness CWE-653 – Improper Isolation or Compartmentalization

Same technique RCE

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code