Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH_RECEIVE response buffer nvmet_execute_auth_receive()… (CVE-2026-80791)

The Linux kernel vulnerability CVE-2026-80791 involves the nvmet-auth module where the nvmet_execute_auth_receive() function allocates a response buffer using kmalloc() sized according to the host-supplied AUTH_RECEIVE allocation length. However, the DH-HMAC-CHAP builders write only a fixed-size message into this buffer, leaving the remainder uninitialized. Since the full allocation length is copied to the wire by nvmet_copy_to_sgl(), a remote initiator could receive uninitialized slab memory during the pre-authentication handshake. The vulnerability was resolved by changing the allocation to kzalloc(), which zeroes the entire buffer before sending, ensuring no uninitialized data is leaked.

The vulnerability could allow a remote initiator to receive uninitialized kernel memory during the pre-authentication handshake, potentially exposing sensitive information. There is no indication of code execution or privilege escalation. No known exploits are reported in the wild.

A fix is available that changes the buffer allocation from kmalloc() to kzalloc() to zero the response buffer before it is sent. Users should apply the official Linux kernel update that includes this fix. Since this is a kernel-level vulnerability, updating to the patched kernel version is the recommended remediation. Patch status is not explicitly stated in the provided data; check the official Linux kernel advisories for the exact fixed versions and update accordingly.