nvidia-nsight-compute-12.8
Chainguard
Status
Impact
This vulnerability exists in an embedded Go stdlib (1.22.3) within the proprietary nic_sampler binary at /usr/local/cuda-12.8/nsight-compute/host/target-linux-x64/plugins/efa_metrics/nic_sampler. As this is a pre-built proprietary binary distributed by NVIDIA, we cannot rebuild it with an updated Go version. The fix requires NVIDIA to release new binaries built with Go 1.22.7 or later.
Status