CVE-2024-0109

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit versions prior to 12.6

Description The issue is related to a command cuobjdump in NVIDIA CUDA Toolkit, where passing a malformed ELF file can cause a crash. This can lead to an out of bounds read in the unprivileged process memory, resulting in a limited denial of service.

Recommendations For versions prior to 12.6, patch to the latest version as soon as possible to resolve the issue. As a temporary workaround, consider restricting the use of the cuobjdump command until a patch is available.