VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 25, 2026· Updated Jul 14, 2026

CVE-2026-23370

CVE-2026-23370

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Linux/Kernel9 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.11.1,<5.15.203
    • cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
  • Linux/dell-wmi-sysmanllm-fuzzy
  • osv-coords
    pkg:linux/kernel
    Range: >= 5.11.0, < 5.15.203

Patches

Vulnerability mechanics

References

9

News mentions

1