CVE-2021-1071

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-26 · updated 2026-06-17

Description

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead to information disclosure.

Affected products

NVIDIA Linux For Tegra: before r32.5 — fixed in r32.5

How to fix

Upgrade to a fixed version: NVIDIA Linux For Tegra r32.5. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5147
https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Get alerted when CVE-2021-1071 or the next vulnerability affects your stack