CVE-2026-23364 in Linux Kernel
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().
Responsible
Linux
Reservation
01/13/2026
Disclosure
03/25/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353091 | Linux Kernel ksmbd memcmp timing discrepancy | 208 | Not defined | Official fix | CVE-2026-23364 |