Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().
References (6)
Core 6
Core References
Scores
CVSS v3
7.4
EPSS
0.0005
EPSS Percentile
15.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Details
Status
published
Products (20)
linux/Kernel
5.15.0 - 6.1.167linux
linux/Kernel
6.13.0 - 6.18.19linux
linux/Kernel
6.19.0 - 6.19.7linux
linux/Kernel
6.2.0 - 6.6.130linux
linux/Kernel
6.7.0 - 6.12.78linux
Linux/Linux
< 5.15
Linux/Linux
5.15
Linux/Linux
6.1.167 - 6.1.*
Linux/Linux
6.12.78 - 6.12.*
Linux/Linux
6.18.19 - 6.18.*
... and 10 more
Published
Mar 25, 2026
Tracked Since
Mar 25, 2026