A vulnerability in Cockpit's cockpit-ws service allows unauthenticated remote attackers to send specially crafted fragmented WebSocket messages that accumulate without a size limit, causing unbounded memory exhaustion and denial of service. This flaw affects remote management services commonly exposed on Red Hat Enterprise Linux systems. The vulnerability has a high severity rating with a CVSS score of 7.5. No specific affected versions are provided in the data. Red Hat has acknowledged the issue and provided advisory information.