PT-2021-13496 · Nvidia · Nvidia Linux Kernel

Published 2021-08-11 · Updated 2022-07-08 · CVE-2021-1106

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Linux kernel distributions (affected versions not specified)

Description The issue is related to a vulnerability in nvmap, where writes may be allowed to read-only buffers. This may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-1106

Affected Products

Nvidia Linux Kernel

References · 6

• https://nvidia.custhelp.com/app/answers/detail/a_id/5259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1106 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5216 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1106 · Vendor Advisory
• https://t.me/cvenotify/32815 · Telegram Post
• https://t.me/cvenotify/19812 · Telegram Post