CVE-2021-38199: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.

Affected products

• Debian Debian Linux: version 9.0 only; version 11.0 only
• Linux Linux Kernel: before 5.13.4 (fixed in 5.13.4)
• Netapp Element Software: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2021-08-08. Last modified 2026-10-08.