CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.

CVSS v3 8.7 HIGH

8.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5555	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:nvidia:jetson_agx_xavier:-:::::::*
	cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:::::::*
	cpe:2.3:h:nvidia:jetson_nano:-:::::::*
	cpe:2.3:h:nvidia:jetson_nano:-::-:::::
	cpe:2.3:h:nvidia:jetson_nano:-::developer_kit:::::
	cpe:2.3:h:nvidia:jetson_nano_2gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx1:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx1_l4t:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx2:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx2_4gb:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx2_nx:-:::::::*
	cpe:2.3:h:nvidia:jetson_tx2i:-:::::::*
	cpe:2.3:h:nvidia:jetson_xavier_nx:-:::::::*
	cpe:2.3:h:nvidia:jetson_xavier_nx:-::developer_kit:::::
	cpe:2.3:h:nvidia:jetson_xavier_nx:-::production:::::
	cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:::::::*

History

No history.

Information

Published : 2024-08-08 17:15

Updated : 2024-09-16 19:27

NVD link : CVE-2024-0108

Mitre link : CVE-2024-0108

CVE.ORG link : CVE-2024-0108

JSON object : View

Products Affected

nvidia

jetson_agx_xavier_8gb
jetson_agx_xavier
jetson_tx1
jetson_tx2_nx
jetson_agx_xavier_industrial
jetson_tx2_4gb
jetson_tx2i
jetson_xavier_nx
jetson_tx2
jetson_agx_xavier_32gb
jetson_agx_xavier_64gb
jetson_nano_2gb
jetson_nano
jetson_xavier_nx_16gb
jetson_tx1_l4t
jetson_linux
jetson_agx_xavier_16gb

CWE

CWE-755

Improper Handling of Exceptional Conditions

{"id": "CVE-2024-0108", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "published": "2024-08-08T17:15:18.473", "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5555", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-755"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-755"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges."}, {"lang": "es", "value": "NVIDIA Jetson Linux contiene una vulnerabilidad en NvGPU donde las rutas de manejo de errores en el c\u00f3digo de mapeo de GPU MMU no logran limpiar un intento fallido de mapeo. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede provocar denegaci\u00f3n de servicio, ejecuci\u00f3n de c\u00f3digo y escalada de privilegios."}], "lastModified": "2024-09-16T19:27:19.833", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C62FF93F-21E6-41E4-A82C-07AC7DC7951E", "versionEndExcluding": "32.7.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DD3D2AA-2A9F-470D-BB0F-A7B7C2EC2490"}, {"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E0E081CB-B6EC-42DC-BA04-BCA13C17D190"}, {"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4F92D471-8E65-41FC-A5DE-255136F6F989"}, {"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B51F666B-F3ED-4CF3-B48E-B39BDE1C2579"}, {"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E29459F7-997A-4B87-9164-6E3B5158ADC3"}, {"criteria": "cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3C7C6B22-EBD3-4465-9852-4A4844AA714A"}, {"criteria": "cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2B2B041F-21A8-4F0B-BBAF-7CDD8B911547"}, {"criteria": "cpe:2.3:h:nvidia:jetson_nano:-:*:-:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9244F123-8518-4D81-AD26-5695F27F413B"}, {"criteria": "cpe:2.3:h:nvidia:jetson_nano:-:*:developer_kit:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80BF53A0-8FDF-4827-9C00-ED082C4A68C7"}, {"criteria": "cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52E153CA-BE89-4C66-8B72-8901BF592423"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "86D1FDAD-C594-43D9-9BF6-F7461177AB91"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx1_l4t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F08A43AD-CA33-4EA7-9456-C7BDE622FD05"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE9D4A55-A232-4AF2-B7E9-CD58D7D17479"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx2_4gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "71994F94-5279-4107-99F5-48990AE0C686"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64C3FB58-08AA-4FE4-97BE-21B254BA229F"}, {"criteria": "cpe:2.3:h:nvidia:jetson_tx2i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DF55ABB-1B4F-452E-9D84-C01A638F88A0"}, {"criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B0AA5976-FD71-4A53-BD4F-D342E871FEB0"}, {"criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:developer_kit:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E54B955-F0E2-44BD-9B8C-3C788BBCF2A9"}, {"criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:production:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E0C93C3-26F6-48E4-BADA-4DB05A7BA9D1"}, {"criteria": "cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A36028A3-EE83-4158-9039-5C6C795FA048"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}