CVE-2021-34387

published 2021-06-21

CVE-2021-34387: The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is otherwise mapped read only.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	jetson_linux	< 32.5.1	32.5.1
nvidia	nvidia_jetson_tx1	—	—

CWE-276