CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of derived key buffers in the krb5 cryptographic module, where sensitive key material is not properly cleared before memory is freed. This oversight could potentially allow an attacker to access sensitive information from previously allocated memory, posing a risk to the confidentiality of cryptographic operations. Organizations using Linux systems that rely on krb5 for encryption should prioritize applying the relevant patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.