CVE-2021-34406 Race condition in SHIELD TV
A race condition in the NVIDIA Tegra NVHost kernel driver causes a null pointer dereference, leading to system reboots on SHIELD TV devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-34406?
CVE-2021-34406 is a medium-severity vulnerability in NVIDIA SHIELD TV, published on 18 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.
Which versions are affected by CVE-2021-34406?
It affects 1 product.
Products include Nvidia Shield Experience.
How do I fix CVE-2021-34406?
No fix has been published for CVE-2021-34406 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-34406 being exploited?
There is no known exploitation of CVE-2021-34406 in the wild and no public exploit code.
Other vulnerabilities in NVIDIA SHIELD TV
Sources
Also known as GHSA-qpqr-prqw-p5jp.