CVE-2026-23364
kernel: ksmbd: Compare MACs in constant time
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · October 20, 2026
Description
A flaw was found in ksmbd, a Linux kernel module. This vulnerability stems from the use of a non-constant time memory comparison function when verifying Message Authentication Codes (MACs). A remote attacker could exploit this timing difference to conduct a timing attack, potentially leading to the disclosure of sensitive information.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-208 · Observable Timing Discrepancy