PT-2022-9175
CVE-2021-20269
·
Published
2021-11-09
·
Updated
2023-02-12
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
kexec-tools versions prior to 2.0.21-8
kexec-tools versions prior to 2.0.20-47
Description
A flaw was found in the permissions of a log file created by kexec-tools, allowing a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality.
Recommendations
For kexec-tools versions prior to 2.0.21-8, update to version 2.0.21-8 or later.
For kexec-tools versions prior to 2.0.20-47, update to version 2.0.20-47 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾