CVE-2026-93240

A flaw was found in the Linux kernel's memory control group (memcg) subsystem. A local user with permissions to configure memory limits can cause a Denial of Service (DoS) by triggering memory reclamation under legacy memory soft limits. When the kernel's background memory reclamation process manages memory under these settings, it invokes an improper function path that results in a kernel warning and potential system instability.

Red Hat rates this vulnerability as a Low impact flaw because exploiting it requires local privileges to configure cgroup v1 parameters, and the resulting behavior triggers a background kernel warning rather than system compromise or arbitrary code execution. Furthermore, modern enterprise environments such as Red Hat Enterprise Linux 9 and 10 utilize the cgroup v2 hierarchy by default, where legacy soft memory limits are not utilized. Exposure is therefore limited to systems explicitly configured to use legacy control group v1 hierarchies with delegated memory management interfaces.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.