← Back

CVE-2021-38201

nvd nist
Published: Aug 8, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

Affected (6)

Linux
1 product
Linux Kernel
Netapp
4 products
Hci Bootstrap Os
Hci Management Node
Solidfire
Element Software
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 5.11.0 to 5.12.19
Linux Kernel
From 5.13.0 to 5.13.4
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hci Bootstrap Os
All versions
Running on/withPlatform Versions
Netapp
Hci Compute Node
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Hci Management Node
All versions
Solidfire
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Element Software
All versions
Running on/withPlatform Versions
Netapp
Hci Storage Node
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.