Vulnerability · Published Jan 18, 2022 · Assigned by nvidia

CVE-2021-34401

High 7.8

In plain English

A high-severity improper access control in SHIELD TV from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.3%top 77.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of service.

Affected products (as reported)

Vendor	Product	Versions
NVIDIA	SHIELD TV	All versions prior to SE 9.0

Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259 x_refsource_CONFIRM