JL
Product
Jetson Linux
49
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 32Low 2
Watch
Add Jetson Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24148 | 9.4 | Mar 31 | NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure… Affected: before 35.6.4; 36.0 before 36.5 |
| CVE-2024-0108 | 8.8 | Aug 8 | NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt Affected: before 32.7.5 |
| CVE-2022-42269 | 7.9 | Dec 30 | NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information… Affected: before 32.7.2 |
| CVE-2022-42270 | 7.8 | Dec 30 | NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel… Affected: before 32.7.2 |
| CVE-2021-1107 | 7.8 | Aug 11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution, complete denial of service,… Affected: 32.1 before 32.6.1 |
| CVE-2021-1106 | 7.8 | Aug 11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial… Affected: 32.1 before 32.6.1 |
| CVE-2021-34384 | 7.8 | Jun 30 | Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution Affected: before 32.5.1 |
| CVE-2021-34382 | 7.8 | Jun 30 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging… Affected: before 32.5.1 |
| CVE-2021-34381 | 7.8 | Jun 30 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the… Affected: before 32.5.1 |
| CVE-2021-34380 | 7.8 | Jun 30 | Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial… Affected: before 32.5.1 |
| CVE-2021-34372 | 7.8 | Jun 22 | Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a… Affected: before 32.5.1 |
| CVE-2021-34388 | 7.8 | Jun 21 | Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after the heap block, leading to denial of… Affected: before 32.5.1 |
| CVE-2022-21819 | 7.6 | Mar 11 | NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct… Affected: 32.1 before 32.7.1 |
| CVE-2021-1108 | 7.3 | Aug 11 | NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service,… Affected: 32.1 before 32.6.1 |
| CVE-2021-1110 | 7.1 | Aug 11 | NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete… Affected: 32.1 before 32.6.1 |
| CVE-2026-24154 | 6.8 | Mar 31 | NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments Affected: before 35.6.4; 36.0 before 36.5; 38.2 |
| CVE-2023-25518 | 6.8 | Jun 23 | NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to… Affected: before 32.7.4 |
| CVE-2021-1111 | 6.7 | Aug 11 | Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow,… Affected: 32.1 before 32.6.1 |
| CVE-2021-34385 | 6.7 | Jun 30 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow Affected: before 32.5.1 |
| CVE-2021-34383 | 6.7 | Jun 30 | Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges Affected: before 32.5.1 |
| CVE-2021-34379 | 6.7 | Jun 30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing Affected: before 32.5.1 |
| CVE-2021-34378 | 6.7 | Jun 30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing Affected: before 32.5.1 |
| CVE-2021-34377 | 6.7 | Jun 30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing Affected: before 32.5.1 |
| CVE-2021-34376 | 6.7 | Jun 30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing Affected: before 32.5.1 |
| CVE-2021-34375 | 6.7 | Jun 30 | Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-based buffer overflow, leading to denial… Affected: before 32.5.1 |
| CVE-2021-34374 | 6.7 | Jun 30 | Trusty contains a vulnerability in command handlers where the length of input buffers is not verified Affected: before 32.5.1 |
| CVE-2021-34394 | 6.7 | Jun 22 | Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs Affected: before 32.5.1 |
| CVE-2021-34387 | 6.7 | Jun 21 | The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is… Affected: before 32.5.1 |
| CVE-2021-34386 | 6.7 | Jun 21 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow,… Affected: before 32.5.1 |
| CVE-2021-1109 | 6.3 | Aug 11 | NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of… Affected: 32.1 before 32.6.1 |
| CVE-2021-34373 | 6.0 | Jun 30 | Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information… Affected: before 32.5.1 |
| CVE-2022-28195 | 5.7 | Apr 27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged… Affected: before 32.7.2 |
| CVE-2022-28194 | 5.6 | Apr 27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a… Affected: before 32.7.2 |
| CVE-2022-28193 | 5.6 | Apr 27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with… Affected: before 32.7.2 |
| CVE-2026-24153 | 5.5 | Mar 31 | NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled Affected: before 35.6.4; 36.0 before 36.5; 38.2 |
| CVE-2023-25520 | 5.5 | Jun 23 | NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service Affected: before 32.7.4 |
| CVE-2021-1112 | 5.5 | Aug 11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service Affected: 32.1 before 32.6.1 |
| CVE-2021-34392 | 5.5 | Jun 22 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of… Affected: before 32.5.1 |
| CVE-2021-34391 | 5.5 | Jun 22 | Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is… Affected: before 32.5.1 |
| CVE-2021-34390 | 5.5 | Jun 22 | Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is… Affected: before 32.5.1 |
| CVE-2022-28197 | 5.0 | Apr 27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local… Affected: before 32.7.2 |
| CVE-2021-34389 | 5.0 | Jun 21 | Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs Affected: before 32.5.1 |
| CVE-2021-1113 | 4.7 | Aug 11 | NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result… Affected: 32.1 before 32.6.1 |
| CVE-2022-28196 | 4.6 | Apr 27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with… Affected: before 32.7.2 |
| CVE-2021-1114 | 4.4 | Aug 11 | NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service Affected: 32.1 before 32.6.1 |
| CVE-2021-34393 | 4.4 | Jun 22 | Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command Affected: before 32.5.1 |
| CVE-2021-34395 | 4.2 | Jun 22 | Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead… Affected: before 32.5.1 |
| CVE-2021-34397 | 2.3 | Jun 22 | Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service Affected: before 32.5.1 |
| CVE-2021-34396 | 2.3 | Jun 22 | Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of… Affected: before 32.5.1 |
Showing 49