CVE-2026-43377

kernel: ksmbd: Don't log keys in SMB3 signing and encryption key generation

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd in the Linux kernel. When KSMBD_DEBUG_AUTH logging is enabled, sensitive session, signing, encryption, and decryption key bytes are logged. This can lead to information disclosure, potentially exposing user credentials.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-215 · Insertion of Sensitive Information Into Debugging Code