Threats tagged 'ghsa-9hxp-3v8h-pjp2'

A vulnerability in the Linux kernel's nvme-fabrics subsystem causes a memory leak of DHCHAP secret material when parsing malformed secrets. The issue occurs during validation failure of DHCHAP secrets, where temporary strings containing secret data are not properly freed, leading to a leak of sensitive information. This leak can be triggered by writing malformed secrets to /dev/nvme-fabrics with CONFIG_NVME_HOST_AUTH enabled. The vulnerability does not require an active NVMe-oF target or transport connection to exploit.