Nvidia Jetson Linux vulnerabilities

CVE-2021-1112 [MEDIUM] CWE-476 CVE-2021-1112: NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service.

CVE-2023-25520 [MEDIUM] CWE-20 CVE-2023-25520: NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.

CVE-2021-34393 [MEDIUM] CWE-502 CVE-2021-34393: Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

CVE-2021-1113 [MEDIUM] CWE-284 CVE-2021-1113: NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attac NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients.

CVE-2022-28196 [MEDIUM] CWE-20 CVE-2022-28196: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, w NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can ex

CVE-2021-1114 [MEDIUM] CWE-416 CVE-2021-1114: NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service.

CVE-2021-34395 [MEDIUM] CWE-276 CVE-2021-34395: Trusty TLK contains a vulnerability in its access permission settings where it does not properly res Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service.

CVE-2021-34396 [LOW] CVE-2021-34396: Bootloader contains a vulnerability in access permission settings where unauthorized software may be Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service.

CVE-2021-34397 [LOW] CWE-787 CVE-2021-34397: Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may le Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.