PT-2024-15346 · Nvidia+1 · Nvidia Jetson Linux+1

Published 2024-08-08 · Updated 2025-02-14 · CVE-2024-0108

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux (affected versions not specified) Palo Alto firewalls (affected versions not specified)

Description The issue concerns a vulnerability in NVIDIA Jetson Linux, specifically in NvGPU, where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt, potentially leading to denial of service, code execution, and escalation of privileges. Additionally, there is an authentication bypass vulnerability in Palo Alto firewalls that has been exploited by hackers, highlighting ongoing cybersecurity challenges.

Recommendations For NVIDIA Jetson Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Palo Alto firewalls, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2024-0108

Affected Products

Nvidia Jetson Linux

Palo Alto Firewalls

References · 7

• https://osv.dev/vulnerability/CVE-2024-0108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0108 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5555 · Vendor Advisory
• https://t.me/cvedetector/2807 · Telegram Post
• https://twitter.com/oxhak/status/1890362929301553341 · Twitter Post
• https://twitter.com/cracbot/status/1823238132151779553 · Twitter Post
• https://twitter.com/EduardKovacs/status/1890356036223095079 · Twitter Post