public inbox for stable@vger.kernel.org
 help / color / mirror / Atom feed
* [PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
@ 2026-03-03 11:30 Thorsten Blum
  2026-03-03 12:46 ` Ilpo Järvinen
  0 siblings, 1 reply; 2+ messages in thread
From: Thorsten Blum @ 2026-03-03 11:30 UTC (permalink / raw)
  To: Prasanth Ksr, Hans de Goede, Ilpo Järvinen,
	Mario Limonciello, Divya Bharathi
  Cc: Thorsten Blum, stable, Dell.Client.Kernel, platform-driver-x86,
	linux-kernel

set_new_password() hex dumps the entire buffer, which contains plaintext
password data, including current and new passwords. Remove the hex dump
to avoid leaking credentials.

Fixes: e8a60aa7404b ("platform/x86: Introduce support for Systems Management Driver over WMI for Dell Systems")
Cc: stable@vger.kernel.org
Signed-off-by: Thorsten Blum <thorsten.blum@linux.dev>
---
 .../platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c   | 1 -
 1 file changed, 1 deletion(-)

diff --git a/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c b/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
index 86ec962aace9..e586f7957946 100644
--- a/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
+++ b/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
@@ -93,7 +93,6 @@ int set_new_password(const char *password_type, const char *new)
 	if (ret < 0)
 		goto out;
 
-	print_hex_dump_bytes("set new password data: ", DUMP_PREFIX_NONE, buffer, buffer_size);
 	ret = call_password_interface(wmi_priv.password_attr_wdev, buffer, buffer_size);
 	/* on success copy the new password to current password */
 	if (!ret)
-- 
Thorsten Blum <thorsten.blum@linux.dev>
GPG: 1D60 735E 8AEF 3BE4 73B6  9D84 7336 78FD 8DFE EAD4


^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
  2026-03-03 11:30 [PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Thorsten Blum
@ 2026-03-03 12:46 ` Ilpo Järvinen
  0 siblings, 0 replies; 2+ messages in thread
From: Ilpo Järvinen @ 2026-03-03 12:46 UTC (permalink / raw)
  To: Prasanth Ksr, Hans de Goede, Mario Limonciello, Divya Bharathi,
	Thorsten Blum
  Cc: stable, Dell.Client.Kernel, platform-driver-x86, linux-kernel

On Tue, 03 Mar 2026 12:30:51 +0100, Thorsten Blum wrote:

> set_new_password() hex dumps the entire buffer, which contains plaintext
> password data, including current and new passwords. Remove the hex dump
> to avoid leaking credentials.
> 
> 


Thank you for your contribution, it has been applied to my local
review-ilpo-fixes branch. Note it will show up in the public
platform-drivers-x86/review-ilpo-fixes branch only once I've pushed my
local branch there, which might take a while.

The list of commits applied:
[1/1] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
      commit: d1a196e0a6dcddd03748468a0e9e3100790fc85c

--
 i.


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-03-03 12:46 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-03 11:30 [PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Thorsten Blum
2026-03-03 12:46 ` Ilpo Järvinen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox