The following section summarizes the vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS.
L4T ships with a reference root file system based upon the Ubuntu® Operating System, which is vulnerable to “KRACK” vulnerabilities. For more information about “KRACK,” see the Ubuntu Security Notice at <https://usn.ubuntu.com/usn/usn-3455-1/>.
NVIDIA’s risk assessment is based on an average of risk across a diverse set of installed systems and may not represent the true risk of your local installation. NVIDIA recommends consulting a security or IT professional to evaluate the risk of your specific configuration. NVIDIA doesn’t know of any exploits to these issues at this time.