The Linux kernel's dell-wmi-sysman driver previously used print_hex_dump_bytes() to dump the entire BIOS attribute request buffer, which included the security area populated with the current admin password in plaintext. This behavior exposed sensitive password data in kernel logs. The vulnerability was addressed by removing the hex dump operation from the BIOS attribute path, similar to a prior fix for the password attribute path.

Exposing the plaintext BIOS admin password in kernel logs could allow local users or attackers with access to kernel logs to obtain sensitive credentials, potentially leading to unauthorized BIOS configuration changes or privilege escalation. However, exploitation requires access to kernel logs.

This vulnerability has been resolved in the Linux kernel by removing the hex dump of the security buffer containing the plaintext password. Users should update to the fixed kernel version once available. No additional mitigation is required beyond applying the official fix.