Lucene search

K
nvd[email protected]NVD:CVE-2021-1108
HistoryAug 11, 2021 - 10:15 p.m.

CVE-2021-1108

2021-08-1122:15:08
CWE-191
web.nvd.nist.gov
6
nvidia
linux
kernel
fusa capture
vi/isp
vulnerability
denial of service
integrity
confidentiality

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

12.6%

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.

Affected configurations

Nvd
Node
nvidiajetson_linuxRange32.132.6.1
AND
nvidiajetson_agx_xavierMatch-
OR
nvidiajetson_nanoMatch-
OR
nvidiajetson_nano_2gbMatch-
OR
nvidiajetson_tx1Match-
OR
nvidiajetson_tx2Match-
OR
nvidiajetson_tx2_nxMatch-
OR
nvidiajetson_xavier_nxMatch-
Node
nvidiashield_experienceRange<9.0
AND
nvidiashield_tvMatch-
VendorProductVersionCPE
nvidiajetson_linux*cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
nvidiajetson_agx_xavier-cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
nvidiajetson_nano-cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
nvidiajetson_nano_2gb-cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*
nvidiajetson_tx1-cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
nvidiajetson_tx2-cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
nvidiajetson_tx2_nx-cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
nvidiajetson_xavier_nx-cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*
nvidiashield_experience*cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*
nvidiashield_tv-cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2021-1108