HIGH · 7.8

CVE-2021-1106

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstr...

Vulnerability Description

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaJetson Linux>= 32.1, < 32.6.1
NvidiaJetson Agx Xavier-
NvidiaJetson Nano-
NvidiaJetson Nano 2Gb-
NvidiaJetson Tx1-
NvidiaJetson Tx2-
NvidiaJetson Tx2 Nx-
NvidiaJetson Xavier Nx-
NvidiaShield Experience< 9.0
NvidiaShield Tv-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-1106?

CVE-2021-1106 is a vulnerability with a CVSS score of 7.8 (HIGH). NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstr...

How severe is CVE-2021-1106?

CVE-2021-1106 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1106?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier, Nvidia Jetson Nano, Nvidia Jetson Nano 2Gb, Nvidia Jetson Tx1.