CVE-2011-3589: The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and...

Security readout for executives and security teams

This issue could expose secrets from Red Hat crash dump files. A local user may read vmcore content created with overly permissive permissions and recover sensitive data, including credentials. The business concern is data leakage from systems that otherwise appear compromised only locally. Exposure is most likely on Red Hat Enterprise Linux systems running affected kexec-tools packages with crash dump generation enabled. Shared systems or systems with untrusted local users carry higher risk. Treat this as a targeted cleanup priority for RHEL fleets, especially shared servers. It is not evidenced as remotely exploitable, but memory dumps can contain high-value secrets. Mitigation focus: Apply the relevant Red Hat kexec-tools updates from RHSA-2011:1532 or RHSA-2012:0152.; Restrict access to crash dump directories and stored vmcore files.; Remove or protect historical vmcore files that may have permissive permissions..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.