[PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

Thorsten Blum posted 1 patch 1 month, 1 week ago
.../platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c   | 1 -
1 file changed, 1 deletion(-)
[PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
Posted by Thorsten Blum 1 month, 1 week ago
set_new_password() hex dumps the entire buffer, which contains plaintext
password data, including current and new passwords. Remove the hex dump
to avoid leaking credentials.

Fixes: e8a60aa7404b ("platform/x86: Introduce support for Systems Management Driver over WMI for Dell Systems")
Cc: stable@vger.kernel.org
Signed-off-by: Thorsten Blum <thorsten.blum@linux.dev>
---
 .../platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c   | 1 -
 1 file changed, 1 deletion(-)

diff --git a/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c b/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
index 86ec962aace9..e586f7957946 100644
--- a/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
+++ b/drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c
@@ -93,7 +93,6 @@ int set_new_password(const char *password_type, const char *new)
 	if (ret < 0)
 		goto out;
 
-	print_hex_dump_bytes("set new password data: ", DUMP_PREFIX_NONE, buffer, buffer_size);
 	ret = call_password_interface(wmi_priv.password_attr_wdev, buffer, buffer_size);
 	/* on success copy the new password to current password */
 	if (!ret)
-- 
Thorsten Blum <thorsten.blum@linux.dev>
GPG: 1D60 735E 8AEF 3BE4 73B6  9D84 7336 78FD 8DFE EAD4
Re: [PATCH] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
Posted by Ilpo Järvinen 1 month, 1 week ago
On Tue, 03 Mar 2026 12:30:51 +0100, Thorsten Blum wrote:

> set_new_password() hex dumps the entire buffer, which contains plaintext
> password data, including current and new passwords. Remove the hex dump
> to avoid leaking credentials.
> 
> 


Thank you for your contribution, it has been applied to my local
review-ilpo-fixes branch. Note it will show up in the public
platform-drivers-x86/review-ilpo-fixes branch only once I've pushed my
local branch there, which might take a while.

The list of commits applied:
[1/1] platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
      commit: d1a196e0a6dcddd03748468a0e9e3100790fc85c

--
 i.