NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.
cpe:2.3:h:nvidia:jetson_agx_orin_32gb:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:nvidia:jetson_agx_orin_64gb:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:nvidia:jetson_agx_orin_developer_kit:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:nvidia:jetson_agx_orin_industrial:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:nvidia:jetson_agx_thor_developer_kit:-:*:*:*:*:*:*:* - NOT VULNERABLE
NVIDIA Jetson Linux (具体受影响版本请参阅NVIDIA安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/bin/bash
# PoC to check if nvluks trusted application is active in initrd
# This script demonstrates the check for the vulnerability condition.
echo "[*] Checking initrd environment for nvluks trusted application..."
# Hypothetical check for the nvluks service status
# In a real scenario, this might involve querying the TEE or checking specific processes
if systemctl is-active nvluks-service 2>/dev/null || ps aux | grep -v grep | grep -q nvluks; then
echo "[+] VULNERABLE: nvluks trusted application is running and not disabled."
echo "[!] Information disclosure risk is present."
else
echo "[-] Not Vulnerable: nvluks appears to be disabled or not running."
fi