CVE-2024-0125

What it actually does

NULL pointer dereference in nvdisasm command line tool triggered by malformed ELF file leading to limited denial of service.

Why it matters to the business

Users of the affected toolkit experience service interruption when processing untrusted or malformed files; low exploit probability and no ransomware usage reduce urgency but still require patching of widespread developer tooling.

How an attack unfolds

An attacker crafts a malformed ELF file and supplies it as input to the nvdisasm tool; the tool dereferences a null pointer and crashes, resulting in limited denial of service.

How to fix it

Upgrade github.com/docker/docker (Go) to version 17.06.0-ce or later; replace affected CUDA Toolkit installations with patched releases once available.

How to confirm the fix worked

Confirm nvdisasm no longer crashes on the previously crashing malformed ELF test case after upgrade; verify package version matches fixed release.

Typical attack path

1. Obtain or create a malformed ELF binary
2. Invoke nvdisasm on the file via command line
3. Trigger NULL pointer dereference causing process crash

How to detect it

Review command-line audit logs and process execution records for invocations of nvdisasm against unexpected or external ELF files; look for sudden process terminations without other error context.

What your security team should do

• Prioritize update of affected CUDA Toolkit and Docker packages in developer and build environments
• Restrict nvdisasm execution to trusted ELF files only until patched
• Monitor EPSS and KEV status for any change in exploit likelihood