CVE-2026-43377
- Source
- https://cve.org/CVERecord?id=CVE-2026-43377
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43377.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-43377
- Downstream
- Published
- 2026-05-08T14:21:26.618Z
- Modified
- 2026-07-08T08:13:30.335396471Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- ksmbd: Don't log keys in SMB3 signing and encryption key generation
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Don't log keys in SMB3 signing and encryption key generation
When KSMBDDEBUGAUTH logging is enabled, generatesmb3signingkey() and generatesmb3encryptionkey() log the session, signing, encryption, and decryption key bytes. Remove the logs to avoid exposing credentials.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43377.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/3fe2d9ec166b7df9a8df6c0fdcfc210572e27e3f
- https://git.kernel.org/stable/c/407cc37c21d51f9b9d4d20204b04890880cfa6ae
- https://git.kernel.org/stable/c/4084ed720d7d5f4e975c9e4a6267a552dad3b24a
- https://git.kernel.org/stable/c/441336115df26b966575de56daf7107ed474faed
- https://git.kernel.org/stable/c/c6b01b997a2094969e315f1ebfc1d64b8ae2163d
- https://git.kernel.org/stable/c/fec5c70b82af3f59f15bb984df94e5ad1fccfb1e
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43377.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-43377
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9Fixed4084ed720d7d5f4e975c9e4a6267a552dad3b24aFixedfec5c70b82af3f59f15bb984df94e5ad1fccfb1eFixed3fe2d9ec166b7df9a8df6c0fdcfc210572e27e3fFixed407cc37c21d51f9b9d4d20204b04890880cfa6aeFixedc6b01b997a2094969e315f1ebfc1d64b8ae2163dFixed441336115df26b966575de56daf7107ed474faed