wifi: cfg80211: use kfree_sensitive() for connkeys cleanup
authorZilin Guan <zilin@seu.edu.cn>
Fri, 23 May 2025 11:01:56 +0000 (11:01 +0000)
committerJohannes Berg <johannes.berg@intel.com>
Wed, 11 Jun 2025 09:36:56 +0000 (11:36 +0200)
commitf87586598fffac31afc1141471b789251b030a76
tree56469c522fad33f3b3764688ab7f493f50203b1a
parent8d60350891b185553836ebea1c406078a69a56e4
wifi: cfg80211: use kfree_sensitive() for connkeys cleanup

The nl80211_parse_connkeys() function currently uses kfree() to release
the 'result' structure in error handling paths. However, if an error
occurs due to result->def being less than 0, the 'result' structure may
contain sensitive information.

To prevent potential leakage of sensitive data, replace kfree() with
kfree_sensitive() when freeing 'result'. This change aligns with the
approach used in its caller, nl80211_join_ibss(), enhancing the overall
security of the wireless subsystem.

Signed-off-by: Zilin Guan <zilin@seu.edu.cn>
Link: https://patch.msgid.link/20250523110156.4017111-1-zilin@seu.edu.cn
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/wireless/nl80211.c