← Database

CVE-2026-23370

MEDIUM CVSS: 5.5 Published: 2026-03-25 Modified: 2026-07-14

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.

Affected Platforms

Linux Linux Kernel

Weakness Type

NVD-CWE-noinfo

References