CVE-2021-38201: Linux Kernel

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

Affected products

• Linux Linux Kernel: from 5.11.0, before 5.12.19 (fixed in 5.12.19); from 5.13.0, before 5.13.4 (fixed in 5.13.4)
• Netapp Element Software: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2021-08-08. Last modified 2026-06-17.