CVE-2021-20269
Summary
| CVE | CVE-2021-20269 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-03-10 17:41:00 UTC |
|---|
| Updated | 2023-02-12 22:15:00 UTC |
|---|
| Description | A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 1934261 – (CVE-2021-20269) CVE-2021-20269 kexec-tools: incorrect permissions on kdump dmesg file |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159508 Oracle Enterprise Linux Security Update for kexec-tools (ELSA-2021-4404)
- 239789 Red Hat Update for kexec-tools security (RHSA-2021:4404)
- 672258 EulerOS Security Update for kexec-tools (EulerOS-SA-2022-2655)
- 672304 EulerOS Security Update for kexec-tools (EulerOS-SA-2022-2687)
- 940219 AlmaLinux Security Update for kexec-tools (ALSA-2021:4404)
- 960787 Rocky Linux Security Update for kexec-tools (RLSA-2021:4404)
