CVE-2026-23303

Published: Mar 25, 2026Modified: May 28, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, cifs_set_cifscreds() logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing credentials.

Affected (15)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.3.1 to 5.10.253
Linux Linux Kernel	From 5.11 to 5.15.203
Linux Linux Kernel	From 5.16 to 6.1.167
Linux Linux Kernel	From 6.13 to 6.18.17
Linux Linux Kernel	From 6.19 to 6.19.7
Linux Linux Kernel	From 6.2 to 6.6.130
Linux Linux Kernel	From 6.7 to 6.12.77
Linux Linux Kernel	Version 3.3
Linux Linux Kernel	Version 3.3 rc2
Linux Linux Kernel	Version 3.3 rc3
Linux Linux Kernel	Version 3.3 rc4
Linux Linux Kernel	Version 3.3 rc5
Linux Linux Kernel	Version 3.3 rc6
Linux Linux Kernel	Version 3.3 rc7
Linux Linux Kernel	Version 7.0 rc1