CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@nvidia.com

Published

2024-08-08

Last modified

2024-08-09

Weaknesses

CWE-755

Affected products

• Jetson Agx Xavier (Nvidia)
• Jetson Linux (Nvidia)
• Jetson Nano (Nvidia)
• Jetson Nano Series (Nvidia)
• Jetson Tx1 (Nvidia)
• Jetson Tx2 (Nvidia)
• Jetson Tx2 Nx (Nvidia)
• Jetson Tx2 Series (Nvidia)
• Jetson Xavier Nx (Nvidia)
• Nvidia Jetson Agx Xavier Series (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5555