exploitDog

CVE-2026-23364

Опубликовано: 25 мар. 2026

Источник: nvd

CVSS3: 7.4

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: Compare MACs in constant time

To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.1 (включая) до 6.1.167 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.130 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.78 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.19 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.7 (исключая)

cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00392

Низкий

7.4 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2026-23364

CVSS3: 7.4

ubuntu

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().

CVE-2026-23364

redhat

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().

CVE-2026-23364

CVSS3: 5.5

msrc

5 месяцев назад

ksmbd: Compare MACs in constant time

CVE-2026-23364

CVSS3: 7.4

debian

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: k ...

GHSA-4mmg-5v66-42gx

CVSS3: 7.4

github

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().

EPSS

Процентиль: 31%

0.00392

Низкий

7.4 High

CVSS3

Дефекты

NVD-CWE-noinfo