CVE-2021-1071

Published: Jan 26, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead to information disclosure.

Affected (1)

Products: Nvidia: Linux For Tegra

Nvidia

1 product

Linux For Tegra

Configuration A

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Nvidia Linux For Tegra	Before r32.5

Running on/with	Platform Versions
Nvidia Jetson Agx Xavier	All versions
Nvidia Jetson Nano	All versions
Nvidia Jetson Nano 2gb	All versions
Nvidia Jetson Tx1	All versions
Nvidia Jetson Tx2	All versions
Nvidia Jetson Xavier Nx	All versions

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Source: psirt@nvidia.com

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.