Linux 6.9 LUKS suspend no longer clears encryption keys from memory

Since Linux kernel 6.9, the LUKS (Linux Unified Key Setup) suspend operation has stopped wiping disk-encryption keys from system memory. This change means encryption keys remain in memory during suspend, potentially exposing them to attackers with physical access. Users relying on LUKS for full-disk encryption should be aware of this security regression.

Sources (1)