JL
Product
Jetson Linux
by Nvidia · last CVE Mar 31, 2026
49
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 32Low 2
Watch

Add Jetson Linux to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24154
6.8
0%
Mar 31
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments
Affected: before 35.6.4; 36.0 before 36.5; 38.2
CVE-2023-25518
6.8
0%
Jun 23
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to…
Affected: before 32.7.4
CVE-2021-1111
6.7
0%
Aug 11
Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow,…
Affected: 32.1 before 32.6.1
CVE-2021-34385
6.7
0%
Jun 30
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow
Affected: before 32.5.1
CVE-2021-34383
6.7
0%
Jun 30
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges
Affected: before 32.5.1
CVE-2021-34379
6.7
0%
Jun 30
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing
Affected: before 32.5.1
CVE-2021-34378
6.7
0%
Jun 30
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing
Affected: before 32.5.1
CVE-2021-34377
6.7
0%
Jun 30
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing
Affected: before 32.5.1
CVE-2021-34376
6.7
0%
Jun 30
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing
Affected: before 32.5.1
CVE-2021-34375
6.7
0%
Jun 30
Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-based buffer overflow, leading to denial…
Affected: before 32.5.1
CVE-2021-34374
6.7
0%
Jun 30
Trusty contains a vulnerability in command handlers where the length of input buffers is not verified
Affected: before 32.5.1
CVE-2021-34394
6.7
0%
Jun 22
Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs
Affected: before 32.5.1
CVE-2021-34387
6.7
0%
Jun 21
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is…
Affected: before 32.5.1
CVE-2021-34386
6.7
0%
Jun 21
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow,…
Affected: before 32.5.1
CVE-2021-1109
6.3
0%
Aug 11
NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of…
Affected: 32.1 before 32.6.1
CVE-2021-34373
6.0
0%
Jun 30
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information…
Affected: before 32.5.1
CVE-2022-28195
5.7
0%
Apr 27
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged…
Affected: before 32.7.2
CVE-2022-28194
5.6
0%
Apr 27
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a…
Affected: before 32.7.2
CVE-2022-28193
5.6
0%
Apr 27
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with…
Affected: before 32.7.2
CVE-2026-24153
5.5
0%
Mar 31
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled
Affected: before 35.6.4; 36.0 before 36.5; 38.2
CVE-2023-25520
5.5
0%
Jun 23
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service
Affected: before 32.7.4
CVE-2021-1112
5.5
0%
Aug 11
NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service
Affected: 32.1 before 32.6.1
CVE-2021-34392
5.5
0%
Jun 22
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of…
Affected: before 32.5.1
CVE-2021-34391
5.5
0%
Jun 22
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is…
Affected: before 32.5.1
CVE-2021-34390
5.5
0%
Jun 22
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is…
Affected: before 32.5.1
CVE-2022-28197
5.0
0%
Apr 27
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local…
Affected: before 32.7.2
CVE-2021-34389
5.0
0%
Jun 21
Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs
Affected: before 32.5.1
CVE-2021-1113
4.7
0%
Aug 11
NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result…
Affected: 32.1 before 32.6.1
CVE-2022-28196
4.6
0%
Apr 27
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with…
Affected: before 32.7.2
CVE-2021-1114
4.4
0%
Aug 11
NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service
Affected: 32.1 before 32.6.1
CVE-2021-34393
4.4
0%
Jun 22
Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command
Affected: before 32.5.1
CVE-2021-34395
4.2
0%
Jun 22
Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead…
Affected: before 32.5.1
Showing 32