CVE-2021-3506: Debian Linux

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Affected products

• Debian Debian Linux: version 9.0 only
• Linux Linux Kernel: before 4.19.191 (fixed in 4.19.191); from 4.20, before 5.4.118 (fixed in 5.4.118); from 5.5, before 5.10.36 (fixed in 5.10.36); from 5.11, before 5.11.20 (fixed in 5.11.20); from 5.12, before 5.12.3 (fixed in 5.12.3); version 5.12 only
• Netapp Cloud Backup: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2021-04-19. Last modified 2026-09-01.