Linux Vulnerability Allows Password Exposure During Program Crashes
security
A vulnerability in Linux allows a program to reveal passwords in the event of a crash. This flaw, known as CVE-2023-32233, affects systems using the Linux kernel 5.18 and earlier versions. When a program crashes, it can leave traces of unerased memory, allowing an attacker to recover sensitive information, including passwords. This vulnerability was discovered by security researchers and can be exploited by attackers with local access to the system. Linux users are encouraged to update their kernel to fix this flaw.