CVE-2024-0132

NVIDIA: CVE-2024-0132 Container Toolkit 1.16.1 and Earlier Time-of-check Time-of Use Vulnerability

CVE-2024-0132 is fixed in 3 products on 1 platform, first by SUSE-SU-2024:3950-1, released November 8, 2024. It is not reported as exploited. Patch Radar priority: High.

High

CVSS

8.3

No vendor severity

Exploitation

None reported

No vendor assessment

CISA KEV

Not listed

Not in the Known Exploited Vulnerabilities catalog

EPSS

0.4084

98th percentile

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241104T154416 2024-11-04T15:44:16Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3233 CVE-2024-46872 GHSA-762g-9p7f-mrww * GO-2024-3234 CVE-2024-47401 GHSA-762v-rq7q-ff97 * GO-2024-3235 CVE-2024-50052 GHSA-g376-m3h3-mj4r * GO-2024-3237 CVE-2024-0133 GHSA-f748-7hpg-88ch * GO-2024-3239 CVE-2024-0132 GHSA-mjjw-553x-87pq * GO-2024-3240 CVE-2024-10452 GHSA-66c4-2g2v-54qw * GO-2024-3241 CVE-2024-10006 GHSA-5c4w-8hhh-3c3h * GO-2024-3242 CVE-2024-10086 GHSA-99wr-c2px-grmh * GO-2024-3243 CVE-2024-10005 GHSA-chgm-7r52-whjj - Update to version 0.0.20241101T215616 2024-11-01T21:56:16Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3244 CVE-2024-50354 GHSA-cph5-3pgr-c82g * GO-2024-3245 CVE-2024-39720 * GO-2024-3246 CVE-2024-8185 GHSA-g233-2p4r-3q7v

Where it's fixed

Product	Fixed in	Fix	Released
Linux
govulncheck-vulndb · opensuse-leap 15.6	0.0.20241104T154416-150000.1.12.1	SUSE-SU-2024:3950-1	Nov 8, 2024
govulncheck-vulndb · sles 15.6	0.0.20241104T154416-150000.1.12.1	SUSE-SU-2024:3950-1	Nov 8, 2024
libnvidia-container · opensuse-leap 15.6	1.18.0-150200.5.9.1	SUSE-SU-2026:0558-1	Feb 16, 2026
libnvidia-container · sles 15.6	1.18.0-150200.5.9.1	SUSE-SU-2026:0558-1	Feb 16, 2026
libnvidia-container · sles 15.7	1.18.0-150200.5.9.1	SUSE-SU-2026:0558-1	Feb 16, 2026
nvidia-container-toolkit · opensuse-leap 15.6	1.18.0-150200.5.17.1	SUSE-SU-2025:4187-1	Nov 24, 2025
nvidia-container-toolkit · sles 15.6	1.18.0-150200.5.17.1	SUSE-SU-2025:4187-1	Nov 24, 2025
nvidia-container-toolkit · sles 15.7	1.18.0-150200.5.17.1	SUSE-SU-2025:4187-1	Nov 24, 2025

Details

Published
October 23, 2024
Weakness
Time-of-check Time-of-use (TOCTOU) Race Condition
Vendor advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0132

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/cve/CVE-2024-0132">CVE-2024-0132 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is this on your machines?

Patchblox finds every install below the fixed version on Windows, macOS and Linux, and updates them through your release rings.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.