NVIDIA Jetson Linux UEFI Improper Authentication Vulnerability Allowing Device Tree Corruption

A vulnerability exists in NVIDIA Jetson Linux UEFI components, where improper authentication could enable a privileged user to corrupt the Linux Device Tree. Exploitation of this vulnerability may result in data tampering and denial-of-service conditions.

Impact

Successful exploitation can lead to unauthorized data modifications and cause denial-of-service conditions.

Remediation

Users can upgrade to NVIDIA Jetson Linux versions 35.6.3 and newer, 36.4.4 and newer, or for IGX Orin, Kernel SRU 1035 and newer. Instructions for downloading this update are available on the NVIDIA Jetson Download Center and the IGX Downloads page.