CVE-2021-1110 — Improper Input Validation in Nvidia Jetson Linux

CWE-20 — Improper Input Validation3 documents3 sources

Severity

7.1HIGHNVD

EPSS

0.1%

top 68.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia Jetson Linux

Timeline

PublishedAug 11

Latest updateMay 24

Description

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages1 packages

▶NVDnvidia/jetson_linux32.1 — 32.6.1

🔴Vulnerability Details

GHSA

GHSA-4ghp-r97r-f275: NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, whi↗2022-05-24

▶

CVEList

CVE-2021-1110: NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, whi↗2021-08-11

▶