CVE-2024-0111: 
CUDA Toolkit vulnerability analysis and mitigation

NVIDIA CUDA Toolkit contains a vulnerability (CVE-2024-0111) in the 'cuobjdump' command where a user may cause a crash or produce incorrect output by passing a malformed ELF file. The vulnerability was discovered in August 2024 and affects all versions up to and including CUDA Toolkit 12.6 (NVIDIA Security).

The vulnerability has been assigned a CVSS v3.1 base score of 4.4 (Medium severity) with the following vector: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L. The issue is classified under CWE-1284 (Improper Validation of Specified Quantity in Input). The vulnerability specifically affects the cuobjdump command-line utility within the CUDA Toolkit (NVIDIA Security, Red Hat Portal).

A successful exploitation of this vulnerability can lead to a limited denial of service or data tampering when processing malformed ELF files through the cuobjdump command (NVIDIA Security).

NVIDIA has released CUDA Toolkit 12.6U1 as a security update to address this vulnerability. Users are advised to download and install this software update from the CUDA Toolkit Downloads page to protect their systems (NVIDIA Security).