CVE-2011-3590: Red Hat Kexec-Tools

Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days.

The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, includes all of root's SSH private keys within a vmcore file, which allows context-dependent attackers to obtain sensitive information by inspecting the file content.

Affected products

• Red Hat Kexec-Tools: up to and including 1.102pre-126; up to and including 2.0.0-188

Published 2014-02-15. Last modified 2026-06-16.