CVE-2021-1070 — Nvidia Linux FOR Tegra vulnerability

3 documents3 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 86.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia Linux FOR Tegra
Timeline
PublishedJan 26
Latest updateMay 24

Description

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages1 packages

▶NVDnvidia/linux< r32.5

🔴Vulnerability Details

2
GHSA
GHSA-4q38-pc3j-9fmc: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32↗2022-05-24
▶
CVEList
CVE-2021-1070: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32↗2021-01-26
▶
CVE-2021-1070 — Nvidia Linux FOR Tegra vulnerability | cvebase