Lucene search

K
nvd[email protected]NVD:CVE-2022-42270
HistoryDec 30, 2022 - 11:15 p.m.

CVE-2022-42270

2022-12-3023:15:11
CWE-121
CWE-787
web.nvd.nist.gov
nvidia
linux
vulnerability
nvdla_emu_task_submit
privilege escalation
integrity compromise
denial of service

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.8%

NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service.

Affected configurations

NVD
Node
nvidiajetson_linuxRange<32.7.2
AND
nvidiajetson_agx_xavierMatch-
OR
nvidiajetson_agx_xavier_16gbMatch-
OR
nvidiajetson_agx_xavier_32gbMatch-
OR
nvidiajetson_agx_xavier_64gbMatch-
OR
nvidiajetson_agx_xavier_8gbMatch-
OR
nvidiajetson_agx_xavier_industrialMatch-
OR
nvidiajetson_xavier_nxMatch-
OR
nvidiajetson_xavier_nx_16gbMatch-

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.8%

Related for NVD:CVE-2022-42270