← Volver a CVEs
CVE-2026-23370
MEDIUM5.5
Descripcion
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.
Detalles CVE
Puntuacion CVSS v3.15.5
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado3/25/2026
Ultima modificacion4/24/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
linux:linux_kernel
Referencias
https://git.kernel.org/stable/c/0e6115c2f2facaed9593c16ad2e5accd487f5c52(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/411ba3cd837f7825c0e648e155bc505641f95854(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/5de34126fb2edf8ab7f25d677b132e92d8bf9ede(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/9bbb420f202834363e1e25435e49db0a385c2232(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/d1a196e0a6dcddd03748468a0e9e3100790fc85c(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/d78e74adc5cfff7afd9d03b9da8058a7e435f9bc(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
https://git.kernel.org/stable/c/d9e785bd62d2ac23cf29a75dcfea8c8087fd3870(416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.