Vulnerability · Published Mar 11, 2022 · Assigned by nvidia
CVE-2022-21819
High 7.6
In plain English
A high-severity incorrect permission assignment in Jetson Nano, Jetson Nano 2GB from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Official description
NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an attack could result in denial of service, code execution, escalation of privileges, and impact to data integrity and confidentiality. The scope impact may extend to other components.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | Jetson Nano, Jetson Nano 2GB | All 32.x versions prior to 32.7.1 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H