CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-08-08

Last modified

2026-10-14

Weaknesses

CWE-125

Affected products

• Linux Kernel (Linux)
• Element Software (Netapp)
• Hci Bootstrap Os (Netapp)
• Hci Management Node (Netapp)
• Solidfire (Netapp)
• Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)

References

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4
• https://github.com/torvalds/linux/commit/7b08cf62b1239a4322427d677ea9363f0ab677c6
• https://security.netapp.com/advisory/ntap-20210902-0010/
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html