PT-2019-11010

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson TX2 versions prior to R28.3 Description: The issue allows local and unprivileged code to access cached information in an unauthorized manner through speculative execution, potentially leading to information disclosure...

CVE-2018-6239: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead to information disclosure. The updates apply to all versions prior to R28.3...

PT-2019-11016

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson TX2 versions prior to R28.3 Description: The issue is related to a problem in the kernel driver's handling of input/output control IOCTL for user mode requests, potentially leading to a non-trusted pointer dereference. This coul...

CVE-2018-6269: Incorrect Permission Assignment for Critical Resource

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control IOCTL handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates...

CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

CVE-2019-5672

NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra L4T operating system on all versions prior to R28.3 where the Secure Shell SSH keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to informati...

Design/Logic Flaw

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

CVE-2019-5672: Undefined Security Weakness

NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra L4T operating system on all versions prior to R28.3 where the Secure Shell SSH keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to informati...

CVE-2019-5673: Improper Check for Unusual or Exceptional Conditions

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

PT-2019-17808

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson TX2 versions prior to R28.3 Description The issue is related to a fault in the ARM System Memory Management Unit SMMU within the kernel driver, where it improperly checks for a fault condition. This can cause transactions to be...

PT-2019-20340

Уязвимость модуля управлением системной памятью ARM System Memory Management Unit SMMU процессоров NVIDIA Jetson TX2 связана с недостаточной проверкой исключительных состояний. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2019-5731

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson TX2 affected versions not specified Description: The issue is related to insufficient exception handling in the ARM System Memory Management Unit SMMU of NVIDIA Jetson TX2 processors. Exploitation of this issue may allow an...

Security Bulletin: NVIDIA Jetson TX1, Jetson TK1, Jetson TX2, and Tegra K1 L4T Security Updates for Multiple Vulnerabilities

Jetson and Tegra L4T contain vulnerabilities which may lead to denial of service, escalation of privileges, or information disclosure. Go to NVIDIA Product Security. Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments...

Security Bulletin: NVIDIA Jetson TX2 L4T Security Updates for CPU Speculative Side Channel Vulnerabilities

Jetson L4T response to CPU speculative side channel vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of novel information disclosure attacks that...