Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp() with the correct function, crypto_memneq().
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Disclosure1 |
| 2026-03-27 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23364 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23364 #CVE-2026-23364 #CVE #CyberSecurity #InfoSec https://t.co/fC3hY7G4qw
Post summary
The tweet announces CVE-2026-23364, noting its unknown risk level and that it affects multiple unspecified products, and links to the NVD page for more details.
🛡️ Constant-time MAC checks in SMB3? Translation: stop leaking secrets via timing side-channels. Security for once isn’t glamorous—still beats “oops” patches later. #WindowsForum https://windowsforum.com/threads/cve-2026-23364-in-ksmbd-why-constant-time-mac-checks-matter-for-smb-security.407525/ #SmbSigning #KsmbdSecurity #Cve202623364 #ConstantTimeMac https://t.co/VDxu0PYtvI
Post summary
The tweet discusses CVE‑2026‑23364, pointing out a side‑channel vulnerability in SMB3 due to non‑constant‑time MAC checks and stressing the need for secure, constant‑time implementations.
CVE-2026-23364 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be const… https://www.cve.org/CVERecord?id=CVE-2026-23364
Post summary
This announcement indicates the Linux kernel has patched CVE-2026-23364 by enforcing constant-time MAC comparisons to mitigate timing attacks; no PoC, exploit, or active exploitation is mentioned.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 5.15 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |