CVE Database›Document archive›CVE-2026-23364

CVE-2026-23364

kernel: ksmbd: Compare MACs in constant time

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd, a Linux kernel module. This vulnerability stems from the use of a non-constant time memory comparison function when verifying Message Authentication Codes (MACs). A remote attacker could exploit this timing difference to conduct a timing attack, potentially leading to the disclosure of sensitive information.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-208 · Observable Timing Discrepancy