CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

CVE-2018-6269

CVE-2018-6269 affects NVIDIA Jetson TX1/TX2 via the Tegra Linux Driver Package (L4T) kernel driver. The IOCTL handling for user-mode requests could dereference non-trusted pointers, potentially leading to information disclosure, denial of service, privilege escalation, or code execution. NVIDIA’s...

CVE-2019-5673

CVE-2019-5673 affects NVIDIA Jetson TX1/TX2 running Linux for Tegra (pre-R28.3). The kernel driver’s ARM SMMU fault-condition check can discard transactions, potentially enabling local denial of service. NVIDIA’s NVIDIA Jetson TX1/TX2 Security Bulletin (April 2019) and the linked NVIDIA updates t...

CVE-2019-5672

CVE-2019-5672 affects NVIDIA Jetson TX1/TX2 running Linux for Tegra (L4T) prior to R28.3, where SSH keys in the sample rootfs are not replaced with unique host keys after generation/flash, potentially leading to information disclosure. The NVIDIA Security Bulletin lists updates for Jetson TX1/TX2...

CVE-2018-6239

CVE-2018-6239 affects NVIDIA Jetson TX2 (Tegra Linux Driver Package). The issue is tied to speculative execution where local, unprivileged code could access contents cached in an unauthorized manner, potentially leading to information disclosure. The NVIDIA advisory notes that all affected TX2/Li...