CyberRota Analysis
AI-GeneratedThe vulnerability in LXD's NVIDIA instance configuration handling allows authenticated attackers to inject arbitrary configuration directives by exploiting newline characters in specific configuration values. This can lead to the execution of arbitrary code on the host system with the privileges of the LXD daemon, posing a significant risk to system integrity. Organizations using LXD with NVIDIA configurations should prioritize patching this critical vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.