CVE-2026-23303EPSS p2.0%
CVE-2026-23303CVE-2026-23303
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Don't log plaintext credentials in cifs_set_cifscreds
When debug logging is enabled, cifs_set_cifscreds() logs the key
payload and exposes the plaintext username and password. Remove the
debug log to avoid exposing credentials.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 0.13% probability of exploitation · percentile 2.0% · 2026-10-16T12:02:51Z |
| Last modified | 2026-10-15 |