]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
tipc: use kfree_sensitive() for session key material
authorDaniel Hodges <hodgesd@meta.com>
Sat, 31 Jan 2026 18:01:14 +0000 (10:01 -0800)
committerJakub Kicinski <kuba@kernel.org>
Tue, 3 Feb 2026 01:46:51 +0000 (17:46 -0800)
commit74d9391e8849e70ded5309222d09b0ed0edbd039
tree0cb319aaf4021e1bb9798c63cd3b893a6fa1ea90
parentdbbec8c5a79f4c7aa8d07da8c0b5a34d76c50699
tipc: use kfree_sensitive() for session key material

The rx->skey field contains a struct tipc_aead_key with GCM-AES
encryption keys used for TIPC cluster communication. Using plain
kfree() leaves this sensitive key material in freed memory pages
where it could potentially be recovered.

Switch to kfree_sensitive() to ensure the key material is zeroed
before the memory is freed.

Fixes: 1ef6f7c9390f ("tipc: add automatic session key exchange")
Signed-off-by: Daniel Hodges <hodgesd@meta.com>
Link: https://patch.msgid.link/20260131180114.2121438-1-hodgesd@meta.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/tipc/crypto.c