This paper investigates a reconfigurable intelligent surface (RIS)-aided underlay cognitive radio (CR) multiple-input multiple-output (MIMO) wiretap channel where the secondary transmitter (ST) communicates with primary user (PU) and secondary user (SU) in the absence of the eavesdropper’s (Eve’s) channel state information (CSI). To enhance the secrecy performance in CR MIMO wiretap channel, the power of useful signal is minimized at ST, and then the residual power is further utilized to design artificial noise (AN) based on statistical CSI at ST. Specifically, we first optimize the transmit covariance matrix at ST and the diagonal phase-shifting matrix at RIS jointly leveraging large-system approximation results. Then the power allocation for SU is optimized to obtain the minimum transmit power of useful information at ST. Besides, we further design AN with the residual power by aligning it into the null space of the SU channel and thus avert the harmful effects of AN to improve the secure communication quality of SU. Finally, through numerical simulations, we illustrate the effectiveness of the proposed algorithm and validate the existence of a trade-off between the quality-of-service (QoS) at SU and secrecy rate.