Security Vulnerability in NVIDIA Container Toolkit

[shwethadec01]

A security vulnerability has been identified in the below container:
nvcr.io/nvidia/k8s-device-plugin v0.17.0-ubi9

Please update the vulnerable NVIDIA Container Toolkit component ASAP to the latest patched version that resolves this vulnerability

CERT Recommendation:
Update NVIDIA Container Toolkit to version 1.17.1 or later.

Vendor Advisories:
Vulnerabilities 1 - 3 | Advisory | NVIDIA Container Toolkit - 13 January 2025CVE-2024-135

CVEs:
CVE-2024-135, CVE-2024-136, CVE-2024-137

[shwethadec01]

Hi Team, please provide the updates if this issue has been acknowledged
Thanks

[elezar]

Please note that the vulnerabilities are not applicable to the go packages -- which the device plugin consumes.

[shwethadec01]

thanks for the confirmation @elezar