Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-23270

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerabil

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA Jetson Orin, IGX Orin and Xavier Devices

Default version status: unaffected

  • NVIDIA Jetson Orin Series All versions prior to JP5.x: 35.6.2affected
  • NVIDIA Jetson Orin Series All versions prior to JP6.x: 36.4.4affected
  • NVIDIA Xavier Series All versions prior to JP5.x: 35.6.2affected
  • IGX Orin All versions prior to IGX 1.1.2affected

References