Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23370

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e8a60aa7404bfef37705da5607c97737073ac38d to < 9bbb420f202834363e1e25435e49db0a385c2232affected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < d9e785bd62d2ac23cf29a75dcfea8c8087fd3870affected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < 411ba3cd837f7825c0e648e155bc505641f95854affected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < 0e6115c2f2facaed9593c16ad2e5accd487f5c52affected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < 5de34126fb2edf8ab7f25d677b132e92d8bf9edeaffected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < d78e74adc5cfff7afd9d03b9da8058a7e435f9bcaffected
  • e8a60aa7404bfef37705da5607c97737073ac38d to < d1a196e0a6dcddd03748468a0e9e3100790fc85caffected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References