Re: [PATCH] smb: client: Don't log plaintext credentials in cifs_set_cifscreds
From: Paulo Alcantara
Date: Thu Feb 26 2026 - 16:41:32 EST
Thorsten Blum <thorsten.blum@xxxxxxxxx> writes:
> When debug logging is enabled, cifs_set_cifscreds() logs the key
> payload and exposes the plaintext username and password. Remove the
> debug log to avoid exposing credentials.
>
> Fixes: 8a8798a5ff90 ("cifs: fetch credentials out of keyring for non-krb5 auth multiuser mounts")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Thorsten Blum <thorsten.blum@xxxxxxxxx>
> ---
> fs/smb/client/connect.c | 1 -
> 1 file changed, 1 deletion(-)
Acked-by: Paulo Alcantara (Red Hat) <pc@xxxxxxxxxxxxx>