CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-25)

CWE

CWE-125

Published

2021-08-08

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel
• netapp:element_software
• netapp:hci_bootstrap_os
• netapp:hci_management_node
• netapp:solidfire

References

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4
• https://github.com/torvalds/linux/commit/7b08cf62b1239a4322427d677ea9363f0ab677c6
• https://security.netapp.com/advisory/ntap-20210902-0010/
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4
• https://github.com/torvalds/linux/commit/7b08cf62b1239a4322427d677ea9363f0ab677c6

Check your stackJSON