fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "5.13.4"
}
],
"cpe": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
},
{
"source": "DESCRIPTION",
"extracted_events": [
{
"fixed": "5.13.4"
}
]
}
]
}"2026-04-12T01:57:30Z"
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2021-38202-3166398e",
"source": "https://github.com/torvalds/linux/commit/7b08cf62b1239a4322427d677ea9363f0ab677c6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"283651572937802180252799747169773673027",
"261499188380691156401893272617955452904",
"114805298686283742177377511221745819214",
"150524029006042538431831169961138471258"
]
},
"target": {
"file": "fs/nfsd/trace.h"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-38202.json"