HIGH · 7.3

CVE-2021-1108

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, a...

Vulnerability Description

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaJetson Linux>= 32.1, < 32.6.1
NvidiaJetson Agx Xavier-
NvidiaJetson Nano-
NvidiaJetson Nano 2Gb-
NvidiaJetson Tx1-
NvidiaJetson Tx2-
NvidiaJetson Tx2 Nx-
NvidiaJetson Xavier Nx-
NvidiaShield Experience< 9.0
NvidiaShield Tv-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-1108?

CVE-2021-1108 is a vulnerability with a CVSS score of 7.3 (HIGH). NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, a...

How severe is CVE-2021-1108?

CVE-2021-1108 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1108?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier, Nvidia Jetson Nano, Nvidia Jetson Nano 2Gb, Nvidia Jetson Tx1.