← Back

CVE-2021-38202

nvd nist
Published: Aug 8, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

Affected (5)

Linux
1 product
Linux Kernel
Netapp
4 products
Hci Bootstrap Os
Hci Management Node
Solidfire
Element Software
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Before 5.13.4
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hci Bootstrap Os
All versions
Running on/withPlatform Versions
Netapp
Hci Compute Node
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Hci Management Node
All versions
Solidfire
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Element Software
All versions
Running on/withPlatform Versions
Netapp
Hci Storage Node
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (7)

Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.