PT-2025-7914 · Nvidia+1 · Nvidia Jetson Linux+2

Published 2025-02-25 · Updated 2025-02-28 · CVE-2024-0148

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux and IGX OS (affected versions not specified)

Description The issue is related to a vulnerability in the UEFI firmware RCM boot mode. An unprivileged attacker with physical access to the device could potentially load untrusted code. A successful exploit might result in code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The impacts of this issue can extend to other components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-447

Related Identifiers

BDU:2025-05902

CVE-2024-0148

Affected Products

Igx Os

Nvidia Jetson Linux

Uefi Firmware

References · 10

• https://bdu.fstec.ru/vul/2025-05902 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-0148 · Security Note
• https://twitter.com/adriananglin/status/1895127081731694838 · Twitter Post
• https://twitter.com/CVEnew/status/1894496056475619785 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5617 · Note
• https://t.me/pentestingnews/57141 · Telegram Post
• https://t.me/cvedetector/18920 · Telegram Post
• https://twitter.com/CVETracker/status/1894840042490655033 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1894931888600694948 · Twitter Post
• https://twitter.com/fletch_ai/status/1895338267958223275 · Twitter Post