CVE-2021-38199
Medium
Published: 08 August 2021
Published
08 August 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0019
40.8th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-38199 is a medium-severity an unspecified weakness vulnerability in Debian Debian Linux. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 40.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-24657
Vulnerability details
fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
linux
linux kernel
≤ 5.13.4
netapp
hci bootstrap os
all versions
netapp
hci management node
all versions
netapp
solidfire
all versions
netapp
element software
all versions
debian
debian linux
11.0, 9.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.