CVE-2021-20269
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a...
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
- Record
CVE-2021-20269- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List No score
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
- Record
CVE-2021-20269- Weakness
- CWE-276
- Updated
- 2026-11-02
EUVDEUVD-2021-7704 No score
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
- Record
EUVD-2021-7704- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-55h9-m2g5-r4xm
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a...
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
- Record
GHSA-55h9-m2g5-r4xm- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
OSVOESA-2022-1825
kexec-tools security update
kexec-tools provides /sbin/kexec binary that facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. This package contains the /sbin/kexec binary and ancillary utilities that together form the userspace component of the kernel's kexec feature.
Security Fix(es):
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.(CVE-2021-20269)
- Record
OESA-2022-1825- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2021:4404
Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update
- Record
RHSA-2021:4404- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRLSA-2021:4404
Low: kexec-tools security, bug fix, and enhancement update
The kexec-tools packages contain the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec feature. The /sbin/kexec binary facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. The kexec fastboot mechanism allows booting a Linux kernel from the context of an already running kernel.
Security Fix(es):
- kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.
- Record
RLSA-2021:4404- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kexec-toolsopenEuler:20.03-LTS-SP1 |
before 2.0.20-16.oe1 | 2.0.20-16.oe1 |
kexec-toolsopenEuler:20.03-LTS-SP3 |
before 2.0.20-18.oe1 | 2.0.20-18.oe1 |
kexec-toolsopenEuler:22.03-LTS |
before 2.0.23-5.oe2203 | 2.0.23-5.oe2203 |
kexec-toolsRed Hat:enterprise_linux:8::baseos |
before 0:2.0.20-57.el8 | 0:2.0.20-57.el8 |
kexec-tools-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:2.0.20-57.el8 | 0:2.0.20-57.el8 |
kexec-tools-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:2.0.20-57.el8 | 0:2.0.20-57.el8 |
kexec-toolsRocky Linux:8 |
before 0:2.0.20-57.el8 | 0:2.0.20-57.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-20269 is a medium vulnerability (CVSS 5.5) in Kexec-tools Project Kexec-tools, published November 9, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in kexec-tools 2.0.20-16.oe1.
References
bugzilla.redhat.com/show_bug.cgi?id=1934261
nvd.nist.gov/vuln/detail/CVE-2021-20269
access.redhat.com/errata/RHSA-2021:4404
github.com/advisories/GHSA-55h9-m2g5-r4xm
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1825
Show 9 moreShow less
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4404.json
cve.org/CVERecord?id=CVE-2021-20269
errata.rockylinux.org/RLSA-2021:4404