CVE-2026-23370 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.

EPSS 0.02% · 6.5th percentile

Risk Scores

EPSS Score
0.02%
6.5th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel5.11, 5.11, 5.11
LinuxLinuxe8a60aa7404bfef37705da5607c97737073ac38d, e8a60aa7404bfef37705da5607c97737073ac38d, 6.1.167

Timeline

References

…and 64 more

Open in Interactive Console →