CVE-2021-23201
First published: Sat Nov 20 2021(Updated: )
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA GeForce GTX 950 | ||
| NVIDIA GeForce GTX 960 | ||
| NVIDIA GeForce GTX 970 | ||
| NVIDIA GeForce GTX 980 | ||
| NVIDIA GeForce GTX TITAN X | ||
| NVIDIA Jetson Nano 2GB | ||
| NVIDIA Jetson Nano 2GB | ||
| NVIDIA Jetson Nano 2GB | ||
| NVIDIA Jetson TX1 L4T | ||
| Nvidia Quadro M1000M | ||
| NVIDIA Quadro M1200 | ||
| NVIDIA Quadro M2000 | ||
| NVIDIA Quadro M2000M | ||
| NVIDIA Quadro M2200 | ||
| NVIDIA Quadro M3000M | ||
| NVIDIA Quadro M4000 | ||
| NVIDIA Quadro M4000M | ||
| NVIDIA Quadro M5000 | ||
| NVIDIA Quadro M5000M | ||
| NVIDIA Quadro M500M | ||
| NVIDIA Quadro M520 | ||
| NVIDIA Quadro M5500 | ||
| NVIDIA Quadro M6000 | ||
| NVIDIA Quadro M600M | ||
| NVIDIA Quadro M620 | ||
| NVIDIA Shield TV | ||
| NVIDIA Shield TV | ||
| NVIDIA Tesla M10 | ||
| NVIDIA Tesla M2050 | ||
| NVIDIA Tesla M2070Q | ||
| NVIDIA Tesla M2070Q | ||
| NVIDIA Tesla M2090 | ||
| NVIDIA Tesla M4 | ||
| NVIDIA Tesla M40 | ||
| NVIDIA Tesla M6 | ||
| NVIDIA Tesla M60 | ||
| Zero One Tech P100s | ||
| Linux Kernel | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-23201?
CVE-2021-23201 has a high severity rating due to the potential for information disclosure and data corruption.
How do I fix CVE-2021-23201?
To address CVE-2021-23201, users should update their NVIDIA drivers and firmware to the latest versions available.
Which NVIDIA products are affected by CVE-2021-23201?
CVE-2021-23201 affects various NVIDIA products, including the GeForce GTX series, Quadro series, and NVIDIA Shield TV.
What could an attacker achieve by exploiting CVE-2021-23201?
Exploiting CVE-2021-23201 could allow an attacker with elevated privileges to load vulnerable microcode and compromise systems.
Is there a public exploit available for CVE-2021-23201?
As of now, there is no known public exploit for CVE-2021-23201, but it's essential to remain vigilant and apply security updates.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/nvidia
- canonical/nvidia geforce gtx 950
- canonical/nvidia geforce gtx 960
- canonical/nvidia geforce gtx 970
- canonical/nvidia geforce gtx 980
- canonical/nvidia geforce gtx titan x
- canonical/nvidia jetson nano 2gb
- canonical/nvidia jetson tx1 l4t
- canonical/nvidia quadro m1000m
- canonical/nvidia quadro m1200
- canonical/nvidia quadro m2000
- canonical/nvidia quadro m2000m
- canonical/nvidia quadro m2200
- canonical/nvidia quadro m3000m
- canonical/nvidia quadro m4000
- canonical/nvidia quadro m4000m
- canonical/nvidia quadro m5000
- canonical/nvidia quadro m5000m
- canonical/nvidia quadro m500m
- canonical/nvidia quadro m520
- canonical/nvidia quadro m5500
- canonical/nvidia quadro m6000
- canonical/nvidia quadro m600m
- canonical/nvidia quadro m620
- canonical/nvidia shield tv
- canonical/nvidia tesla m10
- canonical/nvidia tesla m2050
- canonical/nvidia tesla m2070q
- canonical/nvidia tesla m2090
- canonical/nvidia tesla m4
- canonical/nvidia tesla m40
- canonical/nvidia tesla m6
- canonical/nvidia tesla m60
- canonical/zero one tech p100s
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows