QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-23370

Back to search

CVE-2026-23370

Published: Mar 25, 2026

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.

VendorProductVersions

Linux

Linux

affected
e8a60aa7404bfef37705da5607c97737073ac38d - < 9bbb420f202834363e1e25435e49db0a385c2232
affected
e8a60aa7404bfef37705da5607c97737073ac38d - < d9e785bd62d2ac23cf29a75dcfea8c8087fd3870
affected
e8a60aa7404bfef37705da5607c97737073ac38d - < 411ba3cd837f7825c0e648e155bc505641f95854
affected
e8a60aa7404bfef37705da5607c97737073ac38d - < 0e6115c2f2facaed9593c16ad2e5accd487f5c52
affected
e8a60aa7404bfef37705da5607c97737073ac38d - < 5de34126fb2edf8ab7f25d677b132e92d8bf9ede

+2 more versions

Linux

Linux

affected
5.11
unaffected
0 - < 5.11
unaffected
5.15.203 - <= 5.15.*
unaffected
6.1.167 - <= 6.1.*
unaffected
6.6.130 - <= 6.6.*

+4 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now