8.8

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Jetson Linux Version < 32.7.5
   Nvidia ≫ Jetson Agx Xavier Version -
   Nvidia ≫ Jetson Agx Xavier 16gb Version -
   Nvidia ≫ Jetson Agx Xavier 32gb Version -
   Nvidia ≫ Jetson Agx Xavier 64gb Version -
   Nvidia ≫ Jetson Agx Xavier 8gb Version -
   Nvidia ≫ Jetson Agx Xavier Industrial Version -
   Nvidia ≫ Jetson Nano Version -
   Nvidia ≫ Jetson Nano Version - Edition -
   Nvidia ≫ Jetson Nano Version - Edition developer_kit
   Nvidia ≫ Jetson Nano 2gb Version -
   Nvidia ≫ Jetson Tx1 Version -
   Nvidia ≫ Jetson Tx1 L4t Version -
   Nvidia ≫ Jetson Tx2 Version -
   Nvidia ≫ Jetson Tx2 4gb Version -
   Nvidia ≫ Jetson Tx2 Nx Version -
   Nvidia ≫ Jetson Tx2i Version -
   Nvidia ≫ Jetson Xavier Nx Version -
   Nvidia ≫ Jetson Xavier Nx Version - Edition developer_kit
   Nvidia ≫ Jetson Xavier Nx Version - Edition production
   Nvidia ≫ Jetson Xavier Nx 16gb Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.135
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Nvidia 8.7 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://nvidia.custhelp.com/app/answers/detail/a_id/5555
Vendor Advisory