CVE-2021-34392: Integer Overflow
First published: Tue Jun 22 2021(Updated: )
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Jetson Linux | <32.5.1 | |
| NVIDIA Jetson TX1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA TLK kernel vulnerability?
The vulnerability ID for this NVIDIA TLK kernel vulnerability is CVE-2021-34392.
What is the title of this vulnerability?
The title of this vulnerability is 'Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map...'.
What is the description of this vulnerability?
The description of this vulnerability is 'Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.'
What software is affected by this vulnerability?
The NVIDIA Jetson Linux software version up to exclusive 32.5.1 is affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is medium, with a severity value of 5.5.
How can this vulnerability be exploited?
This vulnerability can be exploited by bypassing boundary checks in the tz_map_shared_mem function of the NVIDIA TLK kernel, leading to potential denial of service.
How can I fix this vulnerability?
To fix this vulnerability, update your NVIDIA Jetson Linux software to version 32.5.1 or higher.
Is the NVIDIA Jetson TX1 affected by this vulnerability?
No, the NVIDIA Jetson TX1 is not affected by this vulnerability.
Are there any references for this vulnerability?
Yes, you can find more information about this vulnerability at: https://nvidia.custhelp.com/app/answers/detail/a_id/5205
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is 190.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia jetson linux
- canonical/nvidia jetson tx1