CVE Feed

    Dashboard / CVE / CVE-2021-23201

    CVE-2021-23201

    NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.

    Published:Nov 20, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 20, 2021
    EPSS Score:0.00038
    CVSS Score:7.5

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Microsoft
    Product
    Windows
    Vendor
    Nvidia
    Product
    Geforce Gtx 950
    Vendor
    Nvidia
    Product
    Geforce Gtx 960
    Vendor
    Nvidia
    Product
    Geforce Gtx 970
    Vendor
    Nvidia
    Product
    Geforce Gtx 980
    Vendor
    Nvidia
    Product
    Geforce Gtx Titan X
    Vendor
    Nvidia
    Product
    Jetson Nano
    Vendor
    Nvidia
    Product
    Jetson Tx1
    Vendor
    Nvidia
    Product
    Quadro M1000m
    Vendor
    Nvidia
    Product
    Quadro M1200
    Vendor
    Nvidia
    Product
    Quadro M2000
    Vendor
    Nvidia
    Product
    Quadro M2000m
    Vendor
    Nvidia
    Product
    Quadro M2200
    Vendor
    Nvidia
    Product
    Quadro M3000m
    Vendor
    Nvidia
    Product
    Quadro M4000
    Vendor
    Nvidia
    Product
    Quadro M4000m
    Vendor
    Nvidia
    Product
    Quadro M5000
    Vendor
    Nvidia
    Product
    Quadro M5000m
    Vendor
    Nvidia
    Product
    Quadro M500m
    Vendor
    Nvidia
    Product
    Quadro M520
    Vendor
    Nvidia
    Product
    Quadro M5500
    Vendor
    Nvidia
    Product
    Quadro M6000
    Vendor
    Nvidia
    Product
    Quadro M600m
    Vendor
    Nvidia
    Product
    Quadro M620
    Vendor
    Nvidia
    Product
    Shield Tv
    Vendor
    Nvidia
    Product
    Shield Tv Pro
    Vendor
    Nvidia
    Product
    Tesla M10
    Vendor
    Nvidia
    Product
    Tesla M2050
    Vendor
    Nvidia
    Product
    Tesla M2070
    Vendor
    Nvidia
    Product
    Tesla M2070q
    Vendor
    Nvidia
    Product
    Tesla M2090
    Vendor
    Nvidia
    Product
    Tesla M4
    Vendor
    Nvidia
    Product
    Tesla M40
    Vendor
    Nvidia
    Product
    Tesla M6
    Vendor
    Nvidia
    Product
    Tesla M60
    Vendor
    Nvidia
    Product
    Tesla P100

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High