CVE-2019-5672

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson TX1 and TX2 versions prior to R28.3

Description The issue concerns the Linux for Tegra (L4T) operating system where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootfs generation and flashing. This may lead to information disclosure.

Recommendations For versions prior to R28.3, replace the SSH keys provided in the sample rootfs with unique host keys to prevent potential information disclosure.