CVE-2024-0148 Information

Description

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution escalation of privileges data tampering denial of service and information disclosure. The scope of the impacts can extend to other components.

Reference

https://nvidia.custhelp.com/app/answers/detail/a_id/5617