High severity · published Aug 8, 2024
CVE-2024-0108
NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NJ
NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series · NVIDIA
All versions prior to and including 32.7.4 · source: vendor
JL
Jetson Linux · Nvidia
before 32.7.5 · source: NVD
JA
Jetson Agx Xavier · Nvidia
through 32.7.4 · source: CISA
JN
Jetson Nano · Nvidia
through 32.7.4 · source: CISA
JT
Jetson Tx1 · Nvidia
through 32.7.4 · source: CISA
JT
Jetson Tx2 · Nvidia
through 32.7.4 · source: CISA
JT
Jetson Tx2 NX · Nvidia
through 32.7.4 · source: CISA
JX
Jetson Xavier NX · Nvidia
through 32.7.4 · source: CISA
Affected product
NJ
NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series
NVIDIA