Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23303

smb: client: Don't log plaintext credentials in cifs_set_cifscreds

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, cifs_set_cifscreds() logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < e5a3b11e07b335006371915b2da47b6056c9e3bcaffected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < 54c570de9a35860dfa85fe668f23ddfda8cc7e26affected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < ff0ece8ed04180c52167c003362284b23cf54e8daffected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < 3990f352bb0adc8688d0949a9c13e3110570eb61affected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < b746a357abfb8fdb0a171d51ec5091e786d34be1affected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < 2ef0fc3bf49db2b9df36d5f44508c9e384bfa2a1affected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < 3e182701db612ddd794ccd5ed822e6cc1db2b972affected
  • 8a8798a5ff90977d6459ce1d657cf8fe13a51e97 to < 2f37dc436d4e61ff7ae0b0353cf91b8c10396e4daffected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References