CVE-2026-23364 — ksmbd: Compare MACs in constant time
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. R…
Published: 2026-03-25 · CVSS: 7.4 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7