CVE-2022-42270

State: Published
Severity: 7.8 High
Published: Dec 30, 2022
Updated: Apr 10, 2025
Reserved: Oct 3, 2022

Description

NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	nvidia

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson AGX Orin SeriesNVIDIA	Versions 35.1 and 34.1.1Affected
NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson AGX Orin SeriesNVIDIA	32.7.2 and prior releasesAffected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5417

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.