PT-2026-27668

CVE-2026-23303

·

Published

2026-01-01

·

Updated

2026-10-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description When debug logging is enabled, the cifs set cifscreds() function logs the key payload, which exposes the plaintext username and password.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-256: Plaintext Storage of a Password
Related identifiers
CVE-2026-23303
BDU:2026-12314
AZL-80643
CLSA-2026-1781344094
CLSA-2026-1782151303
ECHO-AABD-9EE7-11A3
OESA-2026-1862
OESA-2026-1863
OESA-2026-1864
OPENSUSE-SU-2026:20965-1
SUSE-SU-2026:22099-1
SUSE-SU-2026:22108-1
SUSE-SU-2026:22112-1
SUSE-SU-2026:22117-1
SUSE-SU-2026:22127-1
SUSE-SU-2026:22137-1
SUSE-SU-2026:22433-1
SUSE-SU-2026:22458-1
SUSE-SU-2026:2450-1
SUSE-SU-2026:2482-1
SUSE-SU-2026:2591-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8597-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1
USN-8619-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8665-1
USN-8668-1
USN-8668-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com