Vulnerability in Linux Kernel
CVE-2021-23201
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (18.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 18.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- Linux Kernel
- Microsoft Windows
- NVIDIA Geforce Gtx 950
- NVIDIA Geforce Gtx 960
- NVIDIA Geforce Gtx 970
- NVIDIA Geforce Gtx 980
- NVIDIA Geforce Gtx Titan X
- NVIDIA Jetson Nano
- NVIDIA Jetson Tx1
- NVIDIA GPU And Tegra Hardware — versions Turing, Volta, Pascal, Maxwell, Tegra X1, Tegra X1+, Tegra TX2, Xavier
References
- nvidia.custhelp.com/app/answers/detail/a_id/5263 (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-23201?
- CVE-2021-23201 is a high-severity vulnerability in Linux Kernel. CVSS score: 7.5/10. Published 2021-11-20.
- How severe is CVE-2021-23201?
- High severity. CVSS v3 base score is 7.5 out of 10.