CVE-2021-20269

MEDIUM 5.5CVE-2021-20269 · Published 10/03/2022 · updated 17/06/2026

In short

CVE-2021-20269 is a MEDIUM (CVSS 5.5) vulnerability affecting kexec-tools (kexec-tools project).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.8% of all vulnerabilities.
Fix: update to 2.0.20-47, 2.0.21-8 or later.

Package	Affected versions	Patched versions
kexec-tools kexec-tools_project	`< 2.0.20-47< 2.0.21-8`	`2.0.20-472.0.21-8`

Description

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

References

bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free