[PATCH v4 6/9] keys/trusted_keys: clear sensitive PKWM buffers

[sashiko-bot at kernel.org]

> The input buffer to PKWM seal and the output buffer from PKWM unseal
> contain plaintext trusted-key payload data. Freeing these buffers with
> kfree(), without wiping the contents, can leave sensitive key material
> in memory.
> 
> Use kfree_sensitive() to wipe the sensitive key material when freeing
> these buffers.
> 
> Fixes: c99fcb0d735b ("keys/trusted_keys: establish PKWM as a trusted source")
> Cc: stable at vger.kernel.org # 7.0
> Signed-off-by: Srish Srinivasan <ssrish at linux.ibm.com>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261017183853.596052-1-ssrish@linux.ibm.com?part=6