Bootloader Vulnerability in NVIDIA MB2 Affecting NVIDIA Products
CVE-2021-34397

1.9LOW

Key Information:

Vendor

Nvidia
Status
Nvidia Jetson Tx2 Series, Tx2 Nx, Agx Xavier Series, Xavier Nx
Vendor
CVE Published:
22 June 2021

What is CVE-2021-34397?

A vulnerability exists in the NVIDIA MB2 bootloader that may lead to improper heap management, potentially resulting in a denial of service condition. This flaw can cause the system to mishandle memory allocation, potentially disrupting normal operations and affecting system stability. Users of impacted NVIDIA products should evaluate their systems and apply any available mitigations as outlined by the vendor.

Affected Version(s)

NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX All Jetson Linux versions prior to r32.5.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
x_refsource_CONFIRM

CVSS V3.1

Score:
1.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.