Story
Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
1 report
1 website
1 discussion
Latest report
Overview
Mastodon web application requires JavaScript to function properly. Users can also opt for native apps available for their platform.
Summary from mathstodon.xyz.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · mathstodon.xyz
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-07-02.
- Praise: The introduction of a test for this bug is a significant step towards improving security in Linux, as it helps prevent similar regressions in the future.
- Praise: Debian's cryptsetup-suspend extension demonstrates innovative thinking in enhancing security, even if it is not officially supported by the main kernel.
- Praise: The discussion around memory encryption techniques highlights the importance of defense-in-depth strategies in securing sensitive data against physical attacks.
- Concern: The fact that critical security bugs arise from simple oversights in a large codebase raises serious concerns about the reliability of open-source software.
- Concern: The ongoing presence of the encryption key in memory during suspend poses a significant security risk, which could be exploited by anyone with physical access to the device.
- Concern: Relying on extensions like cryptsetup-suspend for security is problematic, as it indicates a lack of robust support in the main kernel, potentially leaving users vulnerable.