CVE-2024-0148

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of...

PT-2025-7914 · Nvidia +1 · Nvidia Jetson Linux +2

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux and IGX OS image affected versions not specified Description: The issue is related to a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrust...

Security Bulletin: NVIDIA Jetson AGX Orin Series and IGX Orin - February 2025

NVIDIA has released a software update for NVIDIA® Jetson AGX Orin Series and IGX Orin. To protect your system, download and install the latest NVIDIA JetPack SDK from NVIDIA DevZone and the new IGX Orin update from IGX Download Center. Go to NVIDIA Product Security. Details This section provides ...

CVE-2024-0112

NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...

CVE-2024-0112

CVE-2024-0112 affects NVIDIA Jetson AGX Orin and NVIDIA IGX Orin; the issue is an input validation failure that can let an attacker escalate permissions and potentially cause code execution, denial of service, data corruption, information disclosure, or privilege escalation. NVIDIA’s security bul...

Security Bulletin: NVIDIA Jetson AGX Orin Series and NVIDIA IGX Orin - February 2025

NVIDIA has released software updates for NVIDIA® Jetson AGX Orin™ series and NVIDIA IGX Orin. To protect your system, download and install the latest release for Jetson AGX Orin series as part of the NVIDIA JetPack™ software development kit SDK from NVIDIA DevZone and the latest release for IGX...

CVE-2022-28194

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrablcbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to...

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

CVE-2024-0108

CVE-2024-0108 is tied to NVIDIA Jetson Linux, specifically NvGPU. The issue arises in error handling paths within the GPU MMU mapping code, which fail to clean up after a failed mapping attempt. Impact described in sources includes potential denial of service, code execution, and privilege escala...

PT-2024-15346 · Nvidia +1 · Nvidia Jetson Linux +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux affected versions not specified Palo Alto firewalls affected versions not specified Description: The issue concerns a vulnerability in NVIDIA Jetson Linux, specifically in NvGPU, where error handling paths in GPU MMU mappi...

UBUNTU-CVE-2024-36884

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidiasmmucontextfault This was missed because of the function pointer indirection. nvidiasmmucontextfault is also installed as a irq function, and the 'void ' was changed to a struct...

CVE-2024-36884 iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidiasmmucontextfault This was missed because of the function pointer indirection. nvidiasmmucontextfault is also installed as a irq function, and the 'void ' was changed to a struct...

CVE-2023-25520

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service...

CVE-2023-25518

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...

CVE-2023-25518

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...

CVE-2023-25520

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service...

CVE-2023-25520

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service...

CVE-2023-25518

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...