CVE-2026-43377 ksmbd: Don't log keys in SMB3 signing and encryption key generation

🗓️ 08 May 2026 14:21:26Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2026-43377 fixes ksmbd by suppressing key logs during SMB signing and encryption key generation to prevent credential exposure.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2026-43377	8 May 202614:21	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	8 May 202600:00	–	cnnvd
CVE	CVE-2026-43377	8 May 202614:21	–	cve
Cvelist	CVE-2026-43377 ksmbd: Don't log keys in SMB3 signing and encryption key generation	8 May 202614:21	–	cvelist
Debian CVE	CVE-2026-43377	8 May 202614:21	–	debiancve
EUVD	EUVD-2026-28683	8 May 202615:31	–	euvd
NVD	CVE-2026-43377	8 May 202615:16	–	nvd
OSV	BELL-CVE-2026-43377	21 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-43377	8 May 202615:16	–	osv

Source	Link
git	www.git.kernel.org/stable/c/3fe2d9ec166b7df9a8df6c0fdcfc210572e27e3f
git	www.git.kernel.org/stable/c/407cc37c21d51f9b9d4d20204b04890880cfa6ae
git	www.git.kernel.org/stable/c/4084ed720d7d5f4e975c9e4a6267a552dad3b24a
git	www.git.kernel.org/stable/c/441336115df26b966575de56daf7107ed474faed
git	www.git.kernel.org/stable/c/c6b01b997a2094969e315f1ebfc1d64b8ae2163d
git	www.git.kernel.org/stable/c/fec5c70b82af3f59f15bb984df94e5ad1fccfb1e
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43377.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-43377
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

08 Jul 2026 08:13Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.1

EPSS0.00248