CVE-2026-43377
ksmbd: Don't log keys in SMB3 signing and encryption key generation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBD_DEBUG_AUTH logging is enabled, generate_smb3signingkey() and generate_smb3encryptionkey() log the session, signing, encryption, and decryption key bytes. Remove the logs to avoid exposing credentials.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | May 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 4084ed720d7d5f4e975c9e4a6267a552dad3b24a e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < fec5c70b82af3f59f15bb984df94e5ad1fccfb1e e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 3fe2d9ec166b7df9a8df6c0fdcfc210572e27e3f e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 407cc37c21d51f9b9d4d20204b04890880cfa6ae e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < c6b01b997a2094969e315f1ebfc1d64b8ae2163d e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 441336115df26b966575de56daf7107ed474faed
Linux / Linux
5.15
References
git.kernel.org: https://git.kernel.org/stable/c/4084ed720d7d5f4e975c9e4a6267a552dad3b24a git.kernel.org: https://git.kernel.org/stable/c/fec5c70b82af3f59f15bb984df94e5ad1fccfb1e git.kernel.org: https://git.kernel.org/stable/c/3fe2d9ec166b7df9a8df6c0fdcfc210572e27e3f git.kernel.org: https://git.kernel.org/stable/c/407cc37c21d51f9b9d4d20204b04890880cfa6ae git.kernel.org: https://git.kernel.org/stable/c/c6b01b997a2094969e315f1ebfc1d64b8ae2163d git.kernel.org: https://git.kernel.org/stable/c/441336115df26b966575de56daf7107ed474faed