CVE-2022-42270

CVSS V2 None CVSS V3 None
Description
NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service.
Overview
  • CVE ID
  • CVE-2022-42270
  • Assigner
  • psirt@nvidia.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-30T23:15:11
  • Last Modified Date
  • 2023-01-09T19:53:47
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:* 1 OR 32.7.2
cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_agx_xavier_64gb:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_agx_xavier_industrial:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:nvidia:jetson_xavier_nx_16gb:-:*:*:*:*:*:*:* 0 OR
References
History
Created Old Value New Value Data Type Notes
2022-12-31 00:17:47 Added to TrackCVE
2022-12-31 00:17:48 Weakness Enumeration new
2022-12-31 04:17:50 2022-12-31T03:26:56 CVE Modified Date updated
2022-12-31 04:17:50 Received Awaiting Analysis Vulnerability Status updated
2023-01-05 21:16:33 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-09 20:19:56 2023-01-09T19:53:47 CVE Modified Date updated
2023-01-09 20:19:56 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-09 20:20:00 Weakness Enumeration update
2023-01-09 20:20:03 CPE Information updated