{"id":17295,"date":"2026-09-05T02:30:57","date_gmt":"2026-09-04T18:30:57","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80791"},"modified":"2026-09-05T02:30:57","modified_gmt":"2026-09-04T18:30:57","slug":"cve-2026-80791","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80791","title":{"rendered":"CVE-2026-80791 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: zero the"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>nvmet-auth: zero the AUTH_RECEIVE response buffer<\/p>\n<p>nvmet_execute_auth_receive() allocates the response buffer with kmalloc()<br \/>\nsized by the host-supplied AUTH_RECEIVE allocation length, but the<br \/>\nDH-HMAC-CHAP builders write only a fixed-size message into it. The full<br \/>\nallocation length is then copied to the wire by nvmet_copy_to_sgl(), so a<br \/>\nremote initiator receives the bytes past the built message &#8212; up to nearly<br \/>\na page of uninitialized slab &#8212; during the pre-authentication handshake.<\/p>\n<p>Allocate the buffer with kzalloc() so the unwritten tail is zeroed before<br \/>\nit is sent; conforming responses are unaffected.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>nvmet-auth: zero the AUTH_RECEIVE response buffer<\/p>\n<p>nvmet_execute_auth_receive() allocates the response buffer with kmalloc()<br \/>\nsized <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17295","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}