]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
authorDaniel Hodges <hodgesd@meta.com>
Sun, 1 Feb 2026 03:08:40 +0000 (19:08 -0800)
committerKeith Busch <kbusch@kernel.org>
Mon, 2 Feb 2026 16:06:33 +0000 (08:06 -0800)
commit0a1fc2f301529ac75aec0ce80d5ab9d9e4dc4b16
tree466f082768c72833d6a66c944e1e98be07eddf9c
parentac30cd304347f2daeece6998bb5f0ae2db64e397
nvme-fabrics: use kfree_sensitive() for DHCHAP secrets

The DHCHAP secrets (dhchap_secret and dhchap_ctrl_secret) contain
authentication key material for NVMe-oF. Use kfree_sensitive() instead
of kfree() in nvmf_free_options() to ensure secrets are zeroed before
the memory is freed, preventing recovery from freed pages.

Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Daniel Hodges <hodgesd@meta.com>
Signed-off-by: Keith Busch <kbusch@kernel.org>
drivers/nvme/host/fabrics.c