Linux Kernel ksmbd Memory Management Vulnerability

A vulnerability in the Linux kernel's ksmbd component has been addressed, which involved improper memory management of cryptographic data. The issue arose from using kfree() to deallocate memory allocated by aead_request_alloc(), which could leave sensitive crypto information unprotected before it was freed. The vulnerability has been resolved by changing the deallocation method to aead_request_free(), ensuring that the sensitive data is zeroed out prior to being released.

Impact

The vulnerability could lead to the exposure of sensitive cryptographic data by failing to properly zero out memory before deallocation, potentially allowing for the recovery of this data after it was freed.