{"id":182443,"date":"2026-07-02T22:53:28","date_gmt":"2026-07-02T20:53:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim"},"modified":"2026-07-02T22:53:28","modified_gmt":"2026-07-02T20:53:29","slug":"problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","title":{"rendered":"Probl\u00e9m\u00e1k a lemezkulcsok mem\u00f3ri\u00e1b\u00f3l val\u00f3 t\u00f6rl\u00e9s\u00e9vel, amikor a Linux k\u00e9szenl\u00e9ti m\u00f3dba l\u00e9p","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A cryptsetup-suspend porting for NixOS revealed an error in the LUKS (Linux Unified Key Setup) disk encryption subsystem, which caused the encryption keys in RAM to not be cleared when the system enters sleep mode, starting from Linux kernel 6.9 (the problematic commit) released in May 2024. <\/p>\n

A cryptsetup-suspend eszk\u00f6z a Debianban a LUKS-part\u00edci\u00f3k automatikus z\u00e1rol\u00e1s\u00e1ra haszn\u00e1latos alv\u00f3 \u00fczemm\u00f3dba l\u00e9p\u00e9s el\u0151tt. Felt\u00e9telezhet\u0151, hogy, ha egy laptopot ellopnak, amely alv\u00f3 \u00fczemm\u00f3dban van, a t\u00e1mad\u00f3 nem f\u00e9rhet hozz\u00e1 az adatokhoz, mivel az alv\u00e1sb\u00f3l val\u00f3 kil\u00e9p\u00e9skor meg kell adni a jelsz\u00f3t a titkos\u00edtott adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s helyre\u00e1ll\u00edt\u00e1s\u00e1hoz. A Linux kernel hib\u00e1ja miatt a LUKS-part\u00edci\u00f3 z\u00e1rol\u00e1sa ut\u00e1n a «cryptsetup luksSuspend» parancs seg\u00edts\u00e9g\u00e9vel a kulcsok nem t\u00f6rl\u0151dtek a RAM-b\u00f3l, \u00e9s l\u00e1that\u00f3k maradtak a \/proc\/keys-en kereszt\u00fcl, ami lehet\u0151v\u00e9 tette a t\u00e1mad\u00f3 sz\u00e1m\u00e1ra, hogy p\u00e9ld\u00e1ul «hideg \u00fajraind\u00edt\u00e1ssal» kinyerje \u0151ket, \u00e9s haszn\u00e1lja az adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9shez. <\/p>\n

The failure to clear the keys was discovered during debugging of a race condition that caused problems with entering sleep mode. The bug appeared after a refactoring in kernel 6.9, during which the keys were tied to the calling thread and were supposed to be removed upon its completion, but in fact remained in memory. A one-liner patch has been proposed to fix this error in the Linux kernel. <\/p>\n

Ez a jav\u00edt\u00e1s nem ker\u00fclt elfogad\u00e1sra a kernelbe, mivel egy hi\u00e1nyoss\u00e1got \u00e1llap\u00edtottak meg: a jav\u00edt\u00e1s csak fizikai t\u00e1rol\u00f3kra hat, de nem m\u0171k\u00f6dik virtu\u00e1lis loop-eszk\u00f6z\u00f6k eset\u00e9n. A probl\u00e9ma megold\u00e1sa helyett a cryptsetup eszk\u00f6z fejleszt\u0151i egy alternat\u00edv megold\u00e1st javasoltak a kulcsok t\u00f6rl\u00e9s\u00e9re. Ez a v\u00e1ltoztat\u00e1s m\u00e1r el lett fogadva, \u00e9s a cryptsetup 2.8.7 kiad\u00e1s\u00e1ba be fog ker\u00fclni. <\/p>\n

In addition, a custom implementation of scripts for locking encrypted disks before entering sleep mode has been created for NixOS, which uses an old patch to the kernel that was not accepted in 2015 and forcefully clears the keys from memory before entering sleep mode.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 cryptsetup-suspend \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Debian \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182443","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Adatv\u00e9delmi kulcsok t\u00f6rl\u00e9se a RAM-b\u00f3l a Linux alv\u00f3 m\u00f3dba l\u00e9p\u00e9sekor | ProHoster","description":"During the porting of the cryptsetup-suspend tool for NixOS, an error was revealed in the LUKS (Linux Unified Key Setup) disk encryption subsystem, which began with Linux kernel 6.9 (the problematic commit).","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u0430 \u0438\u0437 \u041e\u0417\u0423 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 Linux \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-02T20:53:29+00:00","article:modified_time":"2026-07-02T20:53:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182443","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:10","updated":"2026-08-05 12:22:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/182443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=182443"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/182443\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=182443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=182443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=182443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}