NVGPU MMU Mapping Cleanup Failure in NVIDIA Jetson Linux
CVE-2024-0108 Published on August 8, 2024

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.

NVD

Vulnerability Analysis

CVE-2024-0108 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and a small impact on availability.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

NONE

Scope:

CHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

LOW

Weakness Type

Improper Handling of Exceptional Conditions

The software does not handle or incorrectly handles an exceptional condition.

Products Associated with CVE-2024-0108

Want to know whenever a new CVE is published for NVIDIA Jetson Linux? stack.watch will email you.

NVIDIA Jetson Linux

Affected Versions

NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series:

Version All versions prior to and including 32.7.4 is affected.

nvidia jetson_agx_xavier:

Before and including 32.7.4 is affected.

nvidia jetson_xavier_nx:

Before and including 32.7.4 is affected.

nvidia jetson_tx2:

Before and including 32.7.4 is affected.

nvidia jetson_tx2_nx:

Before and including 32.7.4 is affected.

nvidia jetson_tx1:

Before and including 32.7.4 is affected.

nvidia jetson_nano:

Before and including 32.7.4 is affected.

Exploit Probability

EPSS

0.10%

Percentile

28.19%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.