Description
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kexec-tools | Fedora kexec-tools versions prior to 2.0.21-8 and RHEL kexec-tools versions prior to 2.0.20-47 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | kexec-tools | 2.0.20-57.el8 | RHSA-2021:4404 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kexec-tools | 2.0.20-57.el8 | RLSA-2021:4404 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | kexec-tools | 2.0.20-57.0.3.el8 | ELSA-2021-4404 |
Advisories 7
- RHSA-2021:4404 Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RLSA-2021:4404 Low: kexec-tools security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- ICSA-23-166-10 Siemens SIMATIC S7-1500 TM MFP BIOS CISA ICS & IT advisories · Apr 9, 2024
- SSA-831302 SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 Siemens ProductCERT · Apr 9, 2024
- WID-SEC-2023-1432 Siemens SIMATIC S7: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 22, 2023
- WID-SEC-2022-0515 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 8, 2023
- ELSA-2021-4404 Low: kexec-tools security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021