Denial of Service Vulnerability in NVIDIA Jetson Linux Driver Package
CVE-2023-25520

4.4MEDIUM

Key Information:

Vendor

Nvidia
Status
Jetson Agx Xavier Series, Jetson Xavier Nx, Jetson Tx2 Series, Jetson Tx2 Nx
Vendor
CVE Published:
23 June 2023

What is CVE-2023-25520?

The NVIDIA Jetson Linux Driver Package exhibits a vulnerability in the nvbootctrl component, allowing a privileged local attacker to configure invalid settings. This misconfiguration can result in a denial of service condition, impacting the functionality of the affected systems. It is crucial for users to monitor this issue and apply necessary mitigations to secure their installations.

Affected Version(s)

Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX All versions prior to 32.7.4

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5466

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.