diff --git a/net/sctp/socket.c b/net/sctp/socket.c
index a573af7dfe41f5b22b5e843b16572d41dded315c..365145746b559da35fb38011122bb87792993626 100644
--- a/net/sctp/socket.c
+++ b/net/sctp/socket.c
@@ -3649,7 +3649,8 @@ static int sctp_setsockopt_auth_key(struct sock *sk,
 	}
 
 out:
-	kzfree(authkey);
+	memzero_explicit(authkey, optlen);
+	kfree(authkey);
 	return ret;
 }