CVE-2021-20269CWE-276

A flaw was found in the permissions of a log file created by kexec-tools

published March 9, 2022

CVSS
—
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-03-09T16:29Z
EPSS history
Timeline
  • 09 MAR 16:29Z
    A flaw was found in the permissions of a log file created by kexec-tools
    cvelistv5