CVE-2018-6269

CWE-732 — Incorrect Permission Assignment3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 83.86%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia Jetson TX2 Nvidia Jetson Tegra TX2

Timeline

PublishedApr 12

Latest updateMay 13

Description

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates apply to all versions prior to R28.3.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDnvidia/jetson_tx2< r28.3

▶CVEListV5nvidia/jetson_tegra_tx2R28.3

🔴Vulnerability Details

GHSA

GHSA-677p-wrj2-2cg2: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-↗2022-05-13

▶

CVEList

CVE-2018-6269: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-↗2019-04-12

▶