PT-2021-13467 · Nvidia · Nvidia Tegra Kernel+6

Published 2021-01-26 · Updated 2021-02-04 · CVE-2021-1071

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, versions prior to r32.5

Description The issue is related to improper access control in the INA3221 driver, which may allow unauthorized users to gain access to system power usage data, potentially leading to information disclosure.

Recommendations For versions prior to r32.5, update to version r32.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the INA3221 driver to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-1071

Affected Products

Jetson Agx Xavier Series

Jetson Xavier Nx

Nvidia Tegra Kernel

Nano

Nano 2Gb

Tx1

Tx2

References · 5

• https://nvidia.custhelp.com/app/answers/detail/a_id/5147 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1071 · Security Note
• https://t.me/cvenotify/9423 · Telegram Post
• https://t.me/cibsecurity/22681 · Telegram Post