diff --git a/Modules/posixmodule.c b/Modules/posixmodule.c
index 24c9e15537d8..7c25a05b4807 100644
--- a/Modules/posixmodule.c
+++ b/Modules/posixmodule.c
@@ -8074,6 +8074,8 @@ typedef BOOL (WINAPI *CRYPTGENRANDOM)(HCRYPTPROV hProv, DWORD dwLen,\
               BYTE *pbBuffer );
 
 static CRYPTGENRANDOM pCryptGenRandom = NULL;
+/* This handle is never explicitly released. Instead, the operating
+   system will release it when the process terminates. */
 static HCRYPTPROV hCryptProv = 0;
 
 static PyObject*