Description
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | kexec-tools | 2.0.0-209.el6 | RHSA-2011:1532 |
| RHEL 5 | kexec-tools | 1.102pre-154.el5 | RHSA-2012:0152 |
Advisories 2
- RHSA-2012:0152 Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1532 Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=716439
- RHSA-2011:1532 vendor-advisory
- RHSA-2012:0152 vendor-advisory