7.8

CVE-2021-1106

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Jetson Linux Version >= 32.1 < 32.6.1
   Nvidia ≫ Jetson Agx Xavier Version -
   Nvidia ≫ Jetson Nano Version -
   Nvidia ≫ Jetson Nano 2gb Version -
   Nvidia ≫ Jetson Tx1 Version -
   Nvidia ≫ Jetson Tx2 Version -
   Nvidia ≫ Jetson Tx2 Nx Version -
   Nvidia ≫ Jetson Xavier Nx Version -
Nvidia ≫ Shield Experience Version < 9.0
   Nvidia ≫ Shield Tv Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.168
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Nvidia 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://nvidia.custhelp.com/app/answers/detail/a_id/5216
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5259
Vendor Advisory