CVE-2022-42270

NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2022-12-30

Last modified

2025-04-10

Weaknesses

CWE-121, CWE-787

Affected products

• Jetson Agx Orin Series (Nvidia)
• Jetson Linux (Nvidia)
• Jetson Xavier Nx (Nvidia)
• Nvidia Jetson Agx Xavier Series (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5417