PT-2022-15153 · Nvidia · Nvidia Jetson Linux

Bennie Affleck · Published 2022-03-11 · Updated 2024-05-08 · CVE-2022-21819

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux (affected versions not specified)

Description The issue is related to an error in the IOMMU configuration, which may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. This could result in denial of service, code execution, escalation of privileges, and impact to data integrity and confidentiality. The scope impact may extend to other components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-21819

Affected Products

Nvidia Jetson Linux

References · 7

• https://osv.dev/vulnerability/CVE-2022-21819 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5321 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21819 · Security Note
• https://thegoodpenguin.co.uk/blog/pcie-dma-attack-against-a-secured-jetson-nano-cve-2022-21819 · Note
• https://t.me/cvenotify/79599 · Telegram Post
• https://t.me/cibsecurity/38786 · Telegram Post
• https://t.me/cvenotify/28102 · Telegram Post