NVIDIA DGX Spark Privilege Escalation Vulnerability Allowing Access to SoC Protected Areas

A vulnerability has been identified in NVIDIA DGX Spark GB10, specifically within the SROOT component. This vulnerability allows an attacker with privileged access to reach areas of the System on Chip (SoC) that are normally protected. Exploiting this vulnerability could result in various impacts, including unauthorized code execution, access to sensitive information, alteration of data, disruption of services, or unauthorized escalation of privileges.

Impact

Successful exploitation could lead to unauthorized code execution, access to sensitive information, unauthorized data modification, disruption of services, or unauthorized privilege escalation.

Remediation

Users are advised to download and install the latest version of NVIDIA DGX OS from the NVIDIA DGX site.