CVE-2021-38199

Medium

Description

fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.

SeverityMedium
CVSS6.5
Exploit probability—
ProductLinux Kernel
PublishedAug 8, 2021
First seenAug 8, 2021

How to fix

Update
  • linux linux_kernel5.13.4 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 5.13.45.13.4
netapp hci_bootstrap_osNo range specified—
netapp hci_management_nodeNo range specified—
netapp solidfireNo range specified—
netapp element_softwareNo range specified—
debian debian_linux9.0, 11.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-38199 · Linux Kernel · Dark Radar