CVE-2026-23303

A flaw was found in the Linux kernel's Server Message Block (SMB) client. When debug logging is enabled, the cifs_set_cifscreds() function logs plaintext credentials, including usernames and passwords. This information disclosure vulnerability allows a local attacker with access to the debug logs to retrieve sensitive authentication details. The primary consequence is the exposure of user credentials, which could lead to unauthorized access to SMB resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.