Re: [PATCH] tpm: use kfree_sensitive() for context and session buffers

James Bottomley <[email protected]> Thu, 16 Jul 2026 08:26:20 -0400
Newsgroups org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel
Message-ID <43b1aaf7cf0c036543aa371ccc5e77db26a386ff.camel@HansenPartnership.com>
On Wed, 2026-07-15 at 18:03 -0600, Ivy Lopez wrote:
> The context_buf and session_buf fields in struct tpm_space contain
> TPM context blobs which may include sensitive cryptographic material.

That's not true ... at least not in a way that could be exfiltrated. 
All cryptographically sensitive areas of the context are already
encrypted by the TPM with an internal key so they contain nothing
useful to an attacker.

Regards,

James