CVE-2024-0108

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-0108
NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5555 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
OR cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:-:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:developer_kit:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx1_l4t:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_4gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2i:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:developer_kit:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:production:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:*
History

16 Sep 2024, 19:27

Type Values Removed Values Added
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5555 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5555 - Vendor Advisory
CPE cpe:2.3:h:nvidia:jetson_tx2i:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:developer_kit:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx1_l4t:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:-:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:production:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_4gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_nano:-:*:developer_kit:*:*:*:*:*
Summary
  • (es) NVIDIA Jetson Linux contiene una vulnerabilidad en NvGPU donde las rutas de manejo de errores en el código de mapeo de GPU MMU no logran limpiar un intento fallido de mapeo. Una explotación exitosa de esta vulnerabilidad puede provocar denegación de servicio, ejecución de código y escalada de privilegios.
CVSS v2 : unknown
v3 : 8.7 		v2 : unknown
v3 : 8.8
First Time Nvidia jetson Linux
Nvidia jetson Agx Xavier
Nvidia jetson Tx2i
Nvidia jetson Xavier Nx 16gb
Nvidia jetson Agx Xavier 8gb
Nvidia jetson Tx1
Nvidia jetson Tx1 L4t
Nvidia
Nvidia jetson Agx Xavier Industrial
Nvidia jetson Agx Xavier 16gb
Nvidia jetson Tx2
Nvidia jetson Xavier Nx
Nvidia jetson Tx2 4gb
Nvidia jetson Agx Xavier 32gb
Nvidia jetson Tx2 Nx
Nvidia jetson Agx Xavier 64gb
Nvidia jetson Nano
Nvidia jetson Nano 2gb

08 Aug 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-08 17:15

Updated : 2024-09-16 19:27

NVD link : CVE-2024-0108

Mitre link : CVE-2024-0108

CVE.ORG link : CVE-2024-0108

JSON object : View

Products Affected

nvidia

  • jetson_agx_xavier_64gb
  • jetson_linux
  • jetson_tx2_nx
  • jetson_nano
  • jetson_agx_xavier_32gb
  • jetson_tx2
  • jetson_agx_xavier_16gb
  • jetson_tx2_4gb
  • jetson_nano_2gb
  • jetson_tx2i
  • jetson_agx_xavier_industrial
  • jetson_tx1_l4t
  • jetson_tx1
  • jetson_xavier_nx_16gb
  • jetson_agx_xavier_8gb
  • jetson_xavier_nx
  • jetson_agx_xavier
CWE
CWE-755

Improper Handling of Exceptional Conditions