CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the Dell WMI Sysman component, where the `set_attribute()` function inadvertently exposes the plaintext admin password in the kernel log due to improper handling of the security buffer. This could lead to unauthorized access if an attacker gains access to the kernel logs. Organizations using affected Linux distributions, especially those running Dell hardware, should prioritize remediation to protect sensitive credentials from exposure.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() populates the security area of the BIOS attribute request buffer with the current admin password via populate_security_buffer(), then dumps the whole request buffer with print_hex_dump_bytes(). This can expose the plaintext admin password in the kernel log. The same issue was fixed for the password attribute path by commit d1a196e0a6dc ("platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data"). Remove the remaining dump from the BIOS attribute path.