Access Permission Flaw in ARM TrustZone Technology Affecting NVIDIA Products
CVE-2021-34387

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Jetson Tx1
Vendor
CVE Published:
21 June 2021

What is CVE-2021-34387?

The vulnerability in NVIDIA's ARM TrustZone technology arises from improper access permission settings, where the portion of DRAM allocated for TrustZone is incorrectly identity-mapped by the Trusty OS with read, write, and execute permissions. This misconfiguration allows unauthorized write access to kernel code and data that should otherwise remain read-only, potentially jeopardizing system integrity and security.

Affected Version(s)

NVIDIA Jetson TX1 All Jetson Linux versions prior to r32.5.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.