CVE-2021-38202: Linux Kernel

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

Affected products

• Linux Linux Kernel: before 5.13.4 (fixed in 5.13.4)
• Netapp Element Software: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2021-08-08. Last modified 2026-06-17.