CVE-2021-38201: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-38201 affects the Linux kernel versions before 5.13.4, specifically in the net/sunrpc/xdr.c component. The vulnerability was discovered and disclosed in August 2021. The issue allows remote attackers to cause a denial of service through xdrsetpagebase slab-out-of-bounds access by performing many NFS 4.2 READPLUS operations (NVD, MITRE CVE).

The vulnerability exists in the net/sunrpc/xdr.c file of the Linux kernel where an out-of-bounds access can occur in the xdrsetpage_base function. The issue has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating it is network accessible, requires low attack complexity, and can result in high availability impact (NVD).

When successfully exploited, this vulnerability can lead to a denial of service condition in affected systems. The attack can be triggered remotely through NFS 4.2 READ_PLUS operations, potentially causing system crashes or service disruptions (NetApp Advisory).

The vulnerability was fixed in Linux kernel version 5.13.4. The patch modifies the xdrsetpage_base function to return early if setting base to a point at the end of the page data, preventing the out-of-bounds access (Linux Kernel Commit).