CVE-2022-42269: Input Validation
First published: Fri Dec 30 2022(Updated: )
NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity. The scope of the impact can extend to other components.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Jetson Linux | <32.7.2 | |
| NVIDIA Jetson AGX Xavier | ||
| Nvidia Jetson Agx Xavier 16gb | ||
| Nvidia Jetson Agx Xavier 32gb | ||
| Nvidia Jetson Agx Xavier 64gb | ||
| Nvidia Jetson Agx Xavier 8gb | ||
| Nvidia Jetson Agx Xavier Industrial | ||
| NVIDIA Jetson TX1 | ||
| NVIDIA Jetson TX2 | ||
| Nvidia Jetson Tx2 4gb | ||
| Nvidia Jetson Tx2 Nx | ||
| Nvidia Jetson Tx2i | ||
| Nvidia Jetson Xavier Nx | ||
| Nvidia Jetson Xavier Nx 16gb |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-42269?
The severity of CVE-2022-42269 is high with a CVSS score of 7.9.
How does CVE-2022-42269 affect NVIDIA Trusted OS?
CVE-2022-42269 affects NVIDIA Trusted OS by allowing a highly privileged local attacker to cause information disclosure and compromise integrity.
Which components are affected by CVE-2022-42269?
The scope of impact for CVE-2022-42269 can extend to other components, in addition to NVIDIA Trusted OS.
How can I fix CVE-2022-42269?
To fix CVE-2022-42269, it is recommended to apply the necessary security updates provided by NVIDIA.
Where can I find more information about CVE-2022-42269?
More information about CVE-2022-42269 can be found at the following reference: https://nvidia.custhelp.com/app/answers/detail/a_id/5417
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/weakness
- agent/tags
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia jetson linux
- canonical/nvidia jetson agx xavier
- canonical/nvidia jetson agx xavier 16gb
- canonical/nvidia jetson agx xavier 32gb
- canonical/nvidia jetson agx xavier 64gb
- canonical/nvidia jetson agx xavier 8gb
- canonical/nvidia jetson agx xavier industrial
- canonical/nvidia jetson tx1
- canonical/nvidia jetson tx2
- canonical/nvidia jetson tx2 4gb
- canonical/nvidia jetson tx2 nx
- canonical/nvidia jetson tx2i
- canonical/nvidia jetson xavier nx
- canonical/nvidia jetson xavier nx 16gb