CVE-2021-34382
Last modified
CVE-2021-34382 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Linux | < 32.5.1 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34382?
How severe is CVE-2021-34382?
How do I fix CVE-2021-34382?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34377Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34378Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34379Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-3438A potential buffer overflow in the software drivers for cert…7.8
- CVE-2021-34380Bootloader contains a vulnerability in NVIDIA MB2 where pote…7.8
- CVE-2021-34381Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…7.8
- CVE-2021-34383Bootloader contains a vulnerability in NVIDIA MB2 where a po…6.7
- CVE-2021-34384Bootloader contains a vulnerability in NVIDIA MB2 where a po…7.8
- CVE-2021-34385Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…6.7
- CVE-2021-34386Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…6.7
- CVE-2021-34387The ARM TrustZone Technology on which Trusty is based on con…6.7
- CVE-2021-34388Bootloader contains a vulnerability in NVIDIA TegraBoot wher…7.8
Are you affected by CVE-2021-34382?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST