Description
The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | kexec-tools | 2.0.0-209.el6 | RHSA-2011:1532 |
| RHEL 5 | kexec-tools | 1.102pre-154.el5 | RHSA-2012:0152 |
Advisories 2
- RHSA-2012:0152 Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1532 Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=716439
- RHSA-2011:1532 vendor-advisory
- RHSA-2012:0152 vendor-advisory