CVE-2015-0267: The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packa...

Security readout for executives and security teams

This flaw affects Red Hat Enterprise Linux systems with vulnerable kexec-tools packages. A local user could abuse temporary-file handling in a Red Hat script to write to files they should not control. It is not a remote internet-facing issue, but it matters on shared or multi-user Linux servers. Exposure is most likely on Red Hat Enterprise Linux hosts running kexec-tools packages older than the vendor-fixed 2.0.7-19 build. Risk is higher where local user accounts, shared administration, or hosted workloads exist. Treat this as a moderate Linux fleet hygiene issue. It is not described as remotely exploitable, but it can undermine system integrity on shared servers and should be closed through normal patch management. Mitigation focus: Apply Red Hat advisory RHSA-2015:0986 where applicable.; Update kexec-tools to the vendor-fixed package level.; Prioritize shared Linux systems with local user access..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.