NVIDIA Jetson Linux nvluks Trusted Application Trust Boundary Violation Vulnerability Allowing Information Disclosure

A trust boundary violation vulnerability has been identified in NVIDIA Jetson Linux, specifically within the initrd component. The issue arises because the nvluks trusted application is not properly disabled. This vulnerability affects several different versions and could lead to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can download and install the latest software update from the APT server, the Jetson Download Center, or the NVIDIA IGX Download page. Instructions for accessing these resources are available on the NVIDIA Product Security website.