Linux Kernel and Linux Code Vulnerabilities

Jetson Linux is a software application. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for computationally intensive projects. A code issue vulnerability exists in the NVIDIA Linux kernel distribution that stems from a NULL pointer dereferen...

Security Bulletin: NVIDIA Jetson TX1, Jetson TK1, Jetson TX2, and Tegra K1 L4T Security Updates for Multiple Vulnerabilities

Jetson and Tegra L4T contain vulnerabilities which may lead to denial of service, escalation of privileges, or information disclosure. Go to NVIDIA Product Security. Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments...

NVIDIA SHIELD TV Tegra Kernel Driver NVMAP Elevation of Privilege Vulnerability

NVIDIA SHIELD TV is a gaming console device from NVIDIA Corporation.Tegra kernel driver is one of the Tegra processor kernel drivers.NVMAP is one of the components of... A security vulnerability exists in the NVMAP of the Tegra kernel driver in NVIDIA SHIELD TV SE 6.2 and earlier versions. An...

CVE-2017-6282

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

Improper access control

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

CVE-2017-6282

CVE-2017-6282 affects the NVIDIA Tegra kernel driver (NVMAP) where an attacker can write an arbitrary value to an arbitrary location, potentially causing privilege escalation. Documents confirm the vulnerability in the Tegra kernel driver and NVMAP component, with CVSS v3.0 scores (9.3 base, high...

PT-2018-8330

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra affected versions not specified Description The NVIDIA Tegra kernel driver contains an issue in NVMAP, allowing an attacker to write an arbitrary value to any location, potentially leading to privilege escalation. Recommendations ...

CVE-2017-6282: Write-what-where Condition

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...

Security Bulletin: NVIDIA Shield TV and Tablet contain multiple vulnerabilities

Vulnerability Details The following sections summarize the vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2016-6790 NVIDIA OpenMax Component contains a vulnerability in LIBNVRM where an input buffer is copied to an output buffer without checking the size of the input...

NVIDIA Tegra Linux Kernel Competitive Conditions Vulnerability

The NVIDIA Tegra Linux Kernel is a Linux driver package for the Tegra mobile superchip from NVIDIA. A competitive condition vulnerability exists in NVIDIA Tegra Linux Kernel version 3.10 in NVMap. A local attacker can exploit this vulnerability to gain privileges via a specially crafted...

CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

Race condition

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

CVE-2014-5332

The CVE-2014-5332 entry affects NVIDIA Tegra Linux Kernel 3.10 and its NVMap driver. A race condition in the NVMAP_IOC_CREATE path can trigger a use-after-free in nvmap_handle during concurrent creation/duplication of handles, enabling a local attacker to escalate privileges (e.g., escaping Chrom...

CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

PT-2015-3793

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra Linux Kernel version 3.10 Description A race condition exists in the NVMap component of the NVIDIA Tegra Linux Kernel, allowing local users to gain privileges. This is achieved through a crafted NVMAP IOC CREATE IOCTL call, which...

CVE-2014-5332: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332

Posted by Lee Campbell, Graphics Pwning Unit This guest post continues Project Zero’s practice of promoting excellence in security research on the Project Zero blog Background: Chrome for Android implements a very different sandbox model to that of Chrome for Linux. One of the platform features w...