Use After Free Vulnerability in NVIDIA Linux Kernel Distributions
CVE-2021-1114

4.4MEDIUM

Key Information:

Vendor
Nvidia
Status
Nvidia Jetson Agx Xavier Series, Jetson Xavier Nx, Jetson Tx2 Series, Jetson Tx2 Nx
Vendor
CVE Published:
11 August 2021

Summary

A vulnerability exists in NVIDIA's Linux kernel distributions related to the kernel crypto node, allowing a Use After Free condition. This could potentially enable an attacker to trigger a complete denial of service, disrupting normal operations and affecting system stability. Users are advised to review the provided information and apply necessary patches to mitigate potential risks.

Affected Version(s)

NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX All Jetson Linux versions prior to r32.6.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5216
x_refsource_CONFIRM

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.