Vulnerability Description
NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Linux | < 32.7.5 |
| Nvidia | Jetson Agx Xavier | - |
| Nvidia | Jetson Agx Xavier 16Gb | - |
| Nvidia | Jetson Agx Xavier 32Gb | - |
| Nvidia | Jetson Agx Xavier 64Gb | - |
| Nvidia | Jetson Agx Xavier 8Gb | - |
| Nvidia | Jetson Agx Xavier Industrial | - |
| Nvidia | Jetson Nano | - |
| Nvidia | Jetson Nano 2Gb | - |
| Nvidia | Jetson Tx1 | - |
| Nvidia | Jetson Tx1 L4T | - |
| Nvidia | Jetson Tx2 | - |
| Nvidia | Jetson Tx2 4Gb | - |
| Nvidia | Jetson Tx2 Nx | - |
| Nvidia | Jetson Tx2I | - |
| Nvidia | Jetson Xavier Nx | - |
| Nvidia | Jetson Xavier Nx 16Gb | - |
Related Weaknesses (CWE)
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5555Vendor Advisory
FAQ
What is CVE-2024-0108?
CVE-2024-0108 is a vulnerability with a CVSS score of 8.7 (HIGH). NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead ...
How severe is CVE-2024-0108?
CVE-2024-0108 has been rated HIGH with a CVSS base score of 8.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-0108?
Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier, Nvidia Jetson Agx Xavier 16Gb, Nvidia Jetson Agx Xavier 32Gb, Nvidia Jetson Agx Xavier 64Gb.