CVE-2025-33182CWE-862broken-access-control

CVE-2025-33182

High · published October 14, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

⚡ A privileged user could potentially corrupt the Linux Device Tree! This vulnerability in NVIDIA Jetson Linux's UEFI is like allowing a chef to rewrite restaurant recipes without any supervision. 🍽️ Think of it like a restaurant where one chef can change all the recipes on the menu whenever they please—without anyone checking the changes. It could lead to some dangerous dishes that ruin your meal (or in this case, your system integrity). If exploited, this vulnerability could allow data tampering, leading to unpredictable behavior, crashes, or even a complete denial of service. Imagine the chaos if your favorite dish suddenly became inedible—your system's reliability would take a hit!

Put simply

Think of it like a restaurant where one chef can change all the recipes on the menu whenever they please—without anyone checking the changes. It could lead to some dangerous dishes that ruin your meal (or in this case, your system integrity). This vulnerability arises from improper authentication in the UEFI of NVIDIA Jetson Linux, allowing a privileged user to manipulate the Linux Device Tree, which can impact system functionality.

What to do

If exploited, this vulnerability could allow data tampering, leading to unpredictable behavior, crashes, or even a complete denial of service. Imagine the chaos if your favorite dish suddenly became inedible—your system's reliability would take a hit! To remediate, ensure you update to the latest version of NVIDIA Jetson Linux that addresses this issue. Review privileged user access and implement stricter authentication measures to prevent unauthorized changes. 🔒 You can tackle this! With the right updates and access controls, you’ll keep your system strong and secure! 🛡️

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00322 · 23.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-14T23:15Z
References (1)
EPSS history
Timeline
  • 14 OCT 19:09Z
    NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree
    cvelistv5