Race Condition Vulnerability in NVIDIA Tegra Kernel Driver
CVE-2021-34406

4.7MEDIUM

Key Information:

Vendor
Nvidia
Status
Shield Tv
Vendor
CVE Published:
18 January 2022

Summary

The NVIDIA Tegra kernel driver has a race condition vulnerability in the NVHost component. This flaw may allow attackers to exploit a specific timing issue, leading to a null pointer dereference. The consequence of this vulnerability might result in an unexpected system reboot, potentially disrupting services and leading to data loss. Timely updates and patches are essential to mitigate this risk.

Affected Version(s)

SHIELD TV All versions prior to SE 9.0

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259
x_refsource_CONFIRM

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.