What is CVE-2021-1106?

CVE-2021-1106 is a high-severity vulnerability in Nvidia Jetson_agx_xavier, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-08-11.

How severe is CVE-2021-1106?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Nvidia Jetson_agx_xavier

CVE-2021-1106

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serio…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (17.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nvidia Jetson_agx_xavier
Nvidia Jetson Agx Xavier Series, Nx, Tx2 Nano, Nano 2gb, Tx1 — versions All Jetson Linux versions prior to r32.6.1
Nvidia Jetson_linux
Nvidia Jetson_nano
Nvidia Jetson_nano_2gb
Nvidia Jetson_tx1
Nvidia Jetson_tx2
Nvidia Jetson_tx2_nx
Nvidia Jetson_xavier_nx
Nvidia Shield_experience

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)
psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1106?: CVE-2021-1106 is a high-severity vulnerability in Nvidia Jetson_agx_xavier, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-08-11.
How severe is CVE-2021-1106?: High severity. CVSS v3 base score is 7.8 out of 10.