$ the-wire · showcase
secretmem locked-page accounting hole closed across Linux tree
By RepoJournal · Filed · About Linux
The mm hotfixes pull for 7.3 rc2 fixes a secretmem workaround that lets unprivileged users evade RLIMIT_MEMLOCK.
The mm hotfixes merge [1] lands 18 fixes, 13 cc:stable and 15 for MM, including one that closes a real accounting hole in mm/secretmem [2]. Secretmem stopped folios from being evicted even after unmap, letting a user map and unmap repeatedly to dodge RLIMIT_MEMLOCK; the fix properly accounts locked pages so the limit actually applies.
Networking also gets a batch of fixes [3], with regressions in page_pool handling odd-sized frags, a u32 duplicate-handle problem when the node ID pool is exhausted, igmp switching to RCU for ip_sf_list, and ip6_gre adding a check before transmit. The ACPI merge [4] merely drops two fields that lost their users, and the s390 merge [5] handles data races, KMSAN reports, and missing length checks across SCLP and zcrypt.
Action items
- → Test your workloads against the secretmem accounting fix [ref:3] if you rely on RLIMIT_MEMLOCK enforcement torvalds/linux [immediate]
References
- [1] Merge tag 'mm-hotfixes-stable-2026-09-03-17-45' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ↗ torvalds/linux
- [2] mm/secretmem: properly account locked pages ↗ torvalds/linux
- [3] Merge tag 'net-7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net ↗ torvalds/linux
- [4] Merge tag 'acpi-7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm ↗ torvalds/linux
- [5] Merge tag 's390-7.3-2' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux ↗ torvalds/linux