CVE-2021-34375 : What You Need to Know

Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, potentially leading to stack-based buffer overflow, denial of service, privilege escalation, and information disclosure.

Understanding CVE-2021-34375

This CVE affects NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX.

What is CVE-2021-34375?

CVE-2021-34375 is a vulnerability in Trusty trusted applications, lacking stack cookie randomization, which can result in critical security consequences.

The Impact of CVE-2021-34375

The impact ranges from denial of service to privilege escalation and sensitive information exposure, affecting the confidentiality, integrity, and availability of the system.

Technical Details of CVE-2021-34375

The vulnerability details include:

Vulnerability Description

The lack of stack cookie randomization in Trusty trusted applications may lead to stack-based buffer overflow vulnerabilities.

Affected Systems and Versions

All Jetson Linux versions prior to r32.5.1 are affected by this vulnerability.

Exploitation Mechanism

Attackers can exploit this vulnerability to potentially achieve denial of service, elevate their privileges, and access confidential information.

Mitigation and Prevention

It is crucial to take immediate and long-term security measures:

Immediate Steps to Take

Update to Jetson Linux version r32.5.1 or later.
Monitor for any signs of unauthorized access or data breaches.

Long-Term Security Practices

Regularly apply security patches and updates to prevent known vulnerabilities.
Implement strict access controls and least privilege principles.

Patching and Updates

Stay informed about security advisories and promptly apply patches released by NVIDIA to ensure system security.