NVIDIA Jetson Linux Command Line Argument Injection Vulnerability in initrd Allowing Privilege Escalation and Code Execution

A vulnerability exists in the initialization ramdisk (initrd) of NVIDIA Jetson Linux. This issue allows an unprivileged attacker with physical access to inject incorrect command line arguments. Exploitation of this vulnerability could result in unauthorized code execution, escalation of privileges, denial of service, data tampering, and information disclosure.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution, elevated privileges, denial of service, data tampering, and unauthorized information disclosure.

Remediation

Users can download and install the latest software update from the APT server, the Jetson Download Center, or the IGX Download Center. Instructions for accessing these resources are available on the NVIDIA Product Security website.