CVE-2026-23370 in Kernel
Сводка (Английский)
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
set_new_password() hex dumps the entire buffer, which contains plaintext
password data, including current and new passwords. Remove the hex dump
to avoid leaking credentials.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Ответственный
Linux
Резервировать
13.01.2026
Раскрытие
25.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 353097 | Linux Kernel set_new_password слабое шифрование | 311 | Не определено | Официальное исправление | CVE-2026-23370 |