In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

set_new_password() hex dumps the entire buffer, which contains plaintext
password data, including current and new passwords. Remove the hex dump
to avoid leaking credentials.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e8a60aa7404bfef37705da5607c97737073ac38d affected < d9e785bd62d2ac23cf29a75dcfea8c8087fd3870
e8a60aa7404bfef37705da5607c97737073ac38d affected < 411ba3cd837f7825c0e648e155bc505641f95854
e8a60aa7404bfef37705da5607c97737073ac38d affected < 0e6115c2f2facaed9593c16ad2e5accd487f5c52
e8a60aa7404bfef37705da5607c97737073ac38d affected < 5de34126fb2edf8ab7f25d677b132e92d8bf9ede
e8a60aa7404bfef37705da5607c97737073ac38d affected < d78e74adc5cfff7afd9d03b9da8058a7e435f9bc
e8a60aa7404bfef37705da5607c97737073ac38d affected < d1a196e0a6dcddd03748468a0e9e3100790fc85c
Linux Linux affected
Version Status Constraints
5.11 affected —
0 unaffected < 5.11
6.1.167 unaffected ≤ 6.1.*
6.6.130 unaffected ≤ 6.6.*
6.12.77 unaffected ≤ 6.12.*
6.18.17 unaffected ≤ 6.18.*
6.19.7 unaffected ≤ 6.19.*
7.0-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0e6115c2f2facaed9593c16ad2e5accd487f5c52 cve-icon cve-icon
https://git.kernel.org/stable/c/411ba3cd837f7825c0e648e155bc505641f95854 cve-icon cve-icon
https://git.kernel.org/stable/c/5de34126fb2edf8ab7f25d677b132e92d8bf9ede cve-icon cve-icon
https://git.kernel.org/stable/c/d1a196e0a6dcddd03748468a0e9e3100790fc85c cve-icon cve-icon
https://git.kernel.org/stable/c/d78e74adc5cfff7afd9d03b9da8058a7e435f9bc cve-icon cve-icon
https://git.kernel.org/stable/c/d9e785bd62d2ac23cf29a75dcfea8c8087fd3870 cve-icon cve-icon
History

Wed, 25 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password() hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking credentials.
Title platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-03-25T10:27:51.370Z

Reserved: 2026-01-13T15:37:46.003Z

Link: CVE-2026-23370

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T11:16:36.527

Modified: 2026-03-25T15:41:33.977

Link: CVE-2026-23370

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.