CVE-2021-38199
Summary
| CVE | CVE-2021-38199 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-08-08 20:15:00 UTC |
| Updated | 2021-12-21 12:54:00 UTC |
| Description | fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Debian | Debian Linux | 9.0 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Application | Netapp | Element Software | - | All | All | All |
| Operating System | Netapp | Hci Bootstrap Os | - | All | All | All |
| Hardware | Netapp | Hci Compute Node | - | All | All | All |
| Application | Netapp | Hci Management Node | - | All | All | All |
| Hardware | Netapp | Hci Storage Node | - | All | All | All |
| Application | Netapp | Solidfire | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| August 2021 Linux Kernel 5.13.4 Vulnerabilities in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| NFSv4: Initialise connection to the server in nfs4_alloc_client() · torvalds/linux@dd99e9f · GitHub | MISC | github.com | |
| cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 | MISC | cdn.kernel.org | |
| [SECURITY] [DLA 2785-1] linux-4.19 security update | MLIST | lists.debian.org | |
| Debian -- Security Information -- DSA-4978-1 linux | DEBIAN | www.debian.org | |
| [SECURITY] [DLA 2843-1] linux security update | MLIST | lists.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178809 Debian Security Update for linux (DSA 4978-1)
- 178844 Debian Security Update for linux-4.19 (DLA 2785-1)
- 178943 Debian Security Update for linux (DLA 2843-1)
- 179784 Debian Security Update for linux (CVE-2021-38199)
- 198514 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5091-1)
- 198515 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5092-1)
- 198521 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5091-2)
- 198523 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5092-2)
- 198524 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5096-1)
- 198533 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5106-1)
- 198548 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5120-1)
- 198562 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5136-1)
- 353145 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-006
- 353156 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-004
- 353184 Amazon Linux Security Advisory for kernel : ALAS-2022-1571
- 353195 Amazon Linux Security Advisory for kernel : ALAS2-2022-1761
- 353242 Amazon Linux Security Advisory for kernel : ALAC2012-2022-036
- 353243 Amazon Linux Security Advisory for kmod-mlx5 : ALAC2012-2022-037
- 353244 Amazon Linux Security Advisory for kmod-sfc : ALAC2012-2022-038
- 671134 EulerOS Security Update for kernel (EulerOS-SA-2021-2688)
- 671135 EulerOS Security Update for kernel (EulerOS-SA-2021-2636)
- 671137 EulerOS Security Update for kernel (EulerOS-SA-2021-2713)
- 671181 EulerOS Security Update for kernel (EulerOS-SA-2021-2934)
- 900294 CBL-Mariner Linux Security Update for kernel 5.10.52.1
- 900304 CBL-Mariner Linux Security Update for kernel 5.10.57.1
- 900319 CBL-Mariner Linux Security Update for kernel 5.10.60.1
- 901711 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (6583-1)
- 903339 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (5074)
- 906078 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (5074-1)