CVE-2026-93243

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the secretmem component where locked pages are not properly accounted for. The system treats memory as if it were locked using mlock(), which should be limited by the RLIMIT MEMLOCK limit. However, because folios remain unevictable until the inode is evicted, users can bypass the RLIMIT MEMLOCK limit by mapping and then unmapping folios. Additionally, these folios are not accounted for in the process's Resident Set Size (RSS), preventing the Out-of-Memory (OOM) killer from identifying and terminating the process. Repeatedly mapping and unmapping memory or forking processes can lead to the exhaustion of all available system memory, resulting in system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.