Lucene search

K
nvd[email protected]NVD:CVE-2021-1107
HistoryAug 11, 2021 - 10:15 p.m.

CVE-2021-1107

2021-08-1122:15:08
web.nvd.nist.gov
3
nvidia linux kernel
nvmap
access controls
code execution
denial of service
system integrity

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution, complete denial of service, and seriously compromised integrity of all system components.

Affected configurations

Nvd
Node
nvidiajetson_linuxRange32.132.6.1
AND
nvidiajetson_agx_xavierMatch-
OR
nvidiajetson_nanoMatch-
OR
nvidiajetson_nano_2gbMatch-
OR
nvidiajetson_tx1Match-
OR
nvidiajetson_tx2Match-
OR
nvidiajetson_tx2_nxMatch-
OR
nvidiajetson_xavier_nxMatch-
Node
nvidiashield_experienceRange<9.0
AND
nvidiashield_tvMatch-
VendorProductVersionCPE
nvidiajetson_linux*cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
nvidiajetson_agx_xavier-cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
nvidiajetson_nano-cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
nvidiajetson_nano_2gb-cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*
nvidiajetson_tx1-cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
nvidiajetson_tx2-cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
nvidiajetson_tx2_nx-cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
nvidiajetson_xavier_nx-cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*
nvidiashield_experience*cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*
nvidiashield_tv-cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2021-1107