← Vulnerability feed

Vulnerability record · CVE-2021-1106 · published 11 August 2021

CVE-2021-1106: Nvidia jetson linux out-of-bounds write vulnerability

Nvidia · Jetson Linux

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.

7.8 CVSS 3.1 High EPSS 0.26% · top 84.4% CWE-787 · Out-of-bounds write
7.8CVSS 3.1 base score, v2 4.6
0.26%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://nvidia.custhelp.com/app/answers/detail/a_id/5216 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5259 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5216 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5259 Vendor Advisory

Track CVE-2021-1106 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.4CVE-2026-24148Nvidia jetson linux insecure default initialization vulnerabilityNVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization …EPSS 0.35%8.8CVE-2024-0108Nvidia jetson linux vulnerabilityNVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A…EPSS 0.23%7.9CVE-2022-42269Nvidia jetson linux improper input validation vulnerabilityNVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local atta…EPSS 0.18%7.8CVE-2022-42270Nvidia jetson linux stack-based buffer overflow vulnerabilityNVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-bas…EPSS 0.18%7.8CVE-2021-34401Nvidia shield experience improper access control vulnerabilityNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to …EPSS 0.30%7.8CVE-2021-34403Nvidia shield experience use after free vulnerabilityNVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, …EPSS 0.30%7.8CVE-2021-1107Nvidia jetson linux vulnerabilityNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution,…EPSS 0.28%7.8CVE-2021-34380Nvidia jetson linux out-of-bounds write vulnerabilityBootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbi…EPSS 0.25%

Source: NIST National Vulnerability Database (record CVE-2021-1106), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.