fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Aug 8, 2021 · NIST NVD

   Detected

   fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

2. Oct 14, 2026 · NIST NVD

   Updated

   fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

Affected

• cpe linux/linux kernelversion unspecified
• cpe netapp/element softwareversion unspecified
• cpe netapp/hci bootstrap osversion unspecified
• cpe netapp/hci management nodeversion unspecified
• cpe netapp/solidfireversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2021-38202

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2021-38202

  30-day exploitation probability 3.2%

  first.org
• NIST NVDVulnerability recordCVE-2021-38202

  fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

  nvd.nist.gov

References

• Mailing List · cdn.kernel.org
• Reference · cert-portal.siemens.com
• Patch · github.com
• Third Party Advisory · security.netapp.com