PT-2026-27668 · Linux · Linux

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-23303

NVD

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Don't log plaintext credentials in cifs set cifscreds

When debug logging is enabled, cifs set cifscreds() logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing credentials.

Related Identifiers

CVE-2026-23303

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-23303 · Security Note
• https://git.kernel.org/stable/c/2f37dc436d4e61ff7ae0b0353cf91b8c10396e4d · Note
• https://git.kernel.org/stable/c/2ef0fc3bf49db2b9df36d5f44508c9e384bfa2a1 · Note
• https://git.kernel.org/stable/c/ff0ece8ed04180c52167c003362284b23cf54e8d · Note
• https://git.kernel.org/stable/c/b746a357abfb8fdb0a171d51ec5091e786d34be1 · Note
• https://git.kernel.org/stable/c/3e182701db612ddd794ccd5ed822e6cc1db2b972 · Note
• https://git.kernel.org/stable/c/3990f352bb0adc8688d0949a9c13e3110570eb61 · Note