Integer Overflow Vulnerability in NVIDIA Trusty Kernel Function
CVE-2021-34391

5.3MEDIUM

Key Information:

Vendor
Nvidia
Status
Nvidia Jetson Tx1
Vendor
CVE Published:
22 June 2021

Summary

A vulnerability exists in the NVIDIA Trusty kernel function that enables an integer overflow due to insufficient checks when handling specific SMC calls. This flaw can be triggered by user interaction and may potentially lead to a denial of service, compromising system stability and performance.

Affected Version(s)

NVIDIA Jetson TX1 All Jetson Linux versions prior to r32.5.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.