Design/Logic Flaw

NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an attack could result in denial of...

PT-2022-15153 · Nvidia · Nvidia Jetson Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux affected versions not specified Description: The issue is related to an error in the IOMMU configuration, which may allow an unprivileged attacker with physical access to the board direct read/write access to the entire...

CVE-2022-21819

NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an attack could result in denial of...

CVE-2022-21819

CVE-2022-21819 affects NVIDIA Jetson Linux distributions. The issue arises from an error in the IOMMU configuration, which may allow an unprivileged attacker with physical access to directly read/write the entire system address space via the PCI bus. Impacts include denial of service, code execut...

Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

Samsung on Monday confirmed a security breach that resulted in the exposure of internal company data, including the source code related to its Galaxy smartphones. "According to our initial analysis, the breach involves some source code relating to the operation of Galaxy devices, but does not...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - March 2022

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that...

NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware

Two of NVIDIA’s code-signing certificates were part of the Feb. 23 Lapsus$ Group ransomware attack the company suffered – certificates that are now being used to sign malware so malicious programs can slide past security safeguards on Windows machines. The Feb. 23 attack saw 1TB of data bleed fro...

A Major Internet Backbone Company Cuts Off Russia

Plus: A ransomware gang leak, an Nvidia hack, and more of the week's top security news...

Nvidia, the ransomware breach with some plot twists

On February 25, news broke about a cyberattack on Nvidia, America’s biggest microchip company, which saw parts of its business taken offline for two days. Soon after, the ransomware group LAPSUS$ claimed responsibility and threatened to leak 1 TB in exfiltrated data. You would think that while th...

Security Notice: NVIDIA Response to Security Incident - March 2022

Go to NVIDIA Product Security. Update March 8, 2022: The two NVIDIA code-signing certificates that were reported to be leaked in this cybersecurity incident are expired: subject CN: NVIDIA Corporation issuer CN: VeriSign Class 3 Code Signing 2010 CA serial: 43bb437d609866286dd839e1d00309f5 valid...

Nvidia GPU Display Driver for Linux拒绝服务漏洞

Nvidia GPU Display Driver for Linux is a driver for interactive support of graphics modules on Linux systems from Nvidia, Inc. A denial-of-service vulnerability exists in the Nvidia GPU Display Driver for Linux kernel driver package, which can be exploited by attackers to The vulnerability can be...

USN-5294-2: Linux kernel vulnerabilities

It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-22600 Szymon Heidrich discovered that the USB Gadget...

Nvidia License System has an unspecified vulnerability

Nvidia License System is an Nvidia licensing system from Nvidia, Inc. The Nvidia License System contains a security vulnerability that could be exploited by an attacker to access other users' credentials and gain upgrade privileges...

Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

CVE-2022-21818

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality a...

CVE-2022-21818

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality a...

CVE-2022-21818

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality a...

Design/Logic Flaw

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality a...

Nvidia License System 安全漏洞

Nvidia License System is an Nvidia licensing system from Nvidia, Inc. The Nvidia License System contains a security vulnerability that could be exploited by an attacker to access other users' credentials and gain upgrade privileges...

CVE-2022-21818

The CVE-2022-21818 issue affects NVIDIA License System, specifically the DLS virtual appliance. The vulnerability lies in the installation scripts, enabling a network-authenticated user (after portal sign-in) to access other users’ credentials and gain escalated privileges, with confirmed impact ...