CVE-2026-93243

A flaw was found in the Linux kernel's secret memory (secretmem) subsystem. A local user can bypass locked memory resource limits by repeatedly mapping and unmapping secret memory ranges. Because the kernel fails to properly track these unevictable memory pages against user limits, an unprivileged local attacker can exhaust system memory, resulting in a Denial of Service (DoS) through system instability.

This vulnerability is rated as having a Low severity impact on Red Hat Enterprise Linux because the secretmem subsystem is disabled by default and requires explicit boot configuration to be accessible. Exploitation necessitates local authenticated execution and cannot be triggered remotely. Even when enabled, the impact is confined to system availability through memory depletion without compromising data confidentiality or system integrity. Standard installations are not exposed to this flaw unless administrators have explicitly activated the feature via kernel boot parameters.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.