Threats tagged 'ghsa-9q86-wxfp-682m'

CVE-2026-93243 addresses a vulnerability in the Linux kernel's secretmem subsystem where locked pages were not properly accounted for. This flaw allowed users to bypass RLIMIT_MEMLOCK limits by mapping and unmapping secretmem regions, causing these pages to remain unevictable and uncounted in process memory usage. As a result, processes could consume excessive system memory without triggering the OOM killer, potentially leading to system instability. The fix involves correctly tracking locked pages per user and removing misleading mlock() semantics for secretmem mappings.