Fig 1Three lines to rootHover to scrub · arrows stepdocker run --gpus all
poc.so, shipped inside the imagenvidia-ctk createContainer hook, running on the hostThe NVIDIA Container Toolkit's createContainer hook runs with host privileges, inherits the container's environment and starts in the container's root filesystem, so LD_PRELOAD=/proc/self/cwd/poc.so loads the image's own library into a host-root process. Fixed in toolkit 1.17.8; the post does not describe that change, so this figure shows only the bug.