Vulnerability · Published May 30, 2025 · Assigned by CPANSec
CVE-2025-40909Perl threads have a working directory race condition where file operations may target unintended paths
Medium 5.9
In plain English
A medium-severity security flaw in perl from perl. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.5%top 57.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | perl | 4:5.32.1-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl | 4:5.26.3-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Algorithm-Diff | 1.1903-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Archive-Tar | 2.38-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Archive-Zip | 1.68-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Attribute-Handlers | 0.99-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Attribute-Handlers | 1.01-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-AutoLoader | 5.74-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-AutoSplit | 5.74-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-B | 1.80-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Benchmark | 1.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-CPAN | 2.28-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-CPAN-DistnameInfo | 0.12-13.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-CPAN-Meta | 2.150010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-CPAN-Meta-Requirements | 2.140-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-CPAN-Meta-YAML | 0.018-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Carp | 1.50-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Class-Struct | 0.66-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Compress-Raw-Zlib | 2.096-2.module_el8.10.0+3779+d5938d28 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Config-Extensions | 0.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Config-Perl-V | 0.32-441.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-DBM_Filter | 0.06-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Data-OptList | 0.110-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Data-Section | 0.200007-8.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-Peek | 1.28-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-Peek | 1.26-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Devel-SelfStubber | 1.06-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-SelfStubber | 1.06-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Digest | 1.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-DirHandle | 1.05-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Dumpvalue | 2.27-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-DynaLoader | 1.47-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Encode-Locale | 1.05-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-English | 1.11-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Env | 1.04-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Errno | 1.28-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Errno | 1.30-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Exporter | 5.74-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-CBuilder | 1:0.280236-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Command | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Constant | 0.25-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Embed | 1.34-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-ExtUtils-Embed | 1.35-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Install | 2.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-MM-Utils | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-MakeMaker | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Manifest | 1:1.73-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Miniperl | 1.09-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ExtUtils-Miniperl | 1.06-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-ExtUtils-ParseXS | 1:3.40-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Fcntl | 1.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Fedora-VSP | 0.001-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Basename | 2.85-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Compare | 1.100.600-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Copy | 2.34-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-DosGlob | 1.12-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Fetch | 1.00-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Find | 1.37-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-HomeDir | 1.004-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Path | 2.16-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Temp | 1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-Which | 1.23-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-File-stat | 1.09-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-FileCache | 1.10-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-FileHandle | 2.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Filter-Simple | 0.96-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-FindBin | 1.51-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-GDBM_File | 1.18-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Getopt-Long | 1:2.52-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Getopt-Std | 1.12-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-HTTP-Tiny | 0.078-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Hash-Util | 0.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Hash-Util-FieldHash | 1.20-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-I18N-Collate | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-I18N-LangTags | 0.44-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-I18N-Langinfo | 0.19-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO | 1.43-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO | 1.38-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-IO-Compress | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO-Compress-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO-Socket-IP | 0.41-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO-Zlib | 1:1.10-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IO-Zlib | 1:1.10-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-IPC-Cmd | 2:1.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IPC-Open3 | 1.21-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-IPC-System-Simple | 1.30-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Importer | 0.025-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-JSON-PP | 1:4.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Locale-Maketext | 1.29-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Locale-Maketext-Simple | 1:0.21-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Locale-Maketext-Simple | 1:0.21-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-MRO-Compat | 0.13-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Math-BigInt | 1:1.9998.18-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Math-BigRat | 0.2614-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Math-Complex | 1.59-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Math-Complex | 1.59-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Memoize | 1.03-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Memoize | 1.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-Build | 2:0.42.31-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-CoreList | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-CoreList-tools | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-Load | 1:0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-Load-Conditional | 0.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-Loaded | 1:0.08-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Module-Loaded | 1:0.08-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Module-Metadata | 1.000037-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-NDBM_File | 1.15-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-NEXT | 0.67-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Net | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Net-Ping | 2.55-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Net-Ping | 2.72-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-ODBM_File | 1.16-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Object-HashBase | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Object-HashBase-tools | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Opcode | 1.48-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-POSIX | 1.94-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Package-Generator | 1.106-12.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Params-Check | 1:0.38-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Perl-OSType | 1.010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-PerlIO-via-QuotedPrint | 0.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Checker | 4:1.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Escapes | 1:1.07-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Functions | 1.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Html | 1.25-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Html | 1.22.02-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Pod-Parser | 1.63-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Perldoc | 3.28.01-443.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Simple | 1:3.42-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Pod-Usage | 4:2.01-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Safe | 2.41-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Search-Dict | 1.07-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-SelectSaver | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-SelfLoader | 1.26-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-SelfLoader | 1.23-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Software-License | 0.103014-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Sub-Exporter | 0.987-17.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Sub-Install | 0.928-15.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Symbol | 1.08-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Sys-Hostname | 1.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+3181+91434291 | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Term-ANSIColor | 5.01-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Term-Cap | 1.17-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Term-Complete | 1.403-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Term-ReadLine | 1.17-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Term-Table | 0.015-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Test | 1.31-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Test | 1.30-423.el8_10 | ALSA-2025:11805 |
| AlmaLinux:8 | perl-Test-Harness | 1:3.42-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Test-Simple | 3:1.302181-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Abbrev | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Balanced | 2.04-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Diff | 1.45-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Glob | 0.11-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-ParseWords | 3.30-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Tabs+Wrap | 2013.0523-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Text-Template | 1.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Thread | 3.05-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Thread-Queue | 3.14-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:8096 |
| AlmaLinux:8 | perl-Thread-Semaphore | 2.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:8096 |
Affected products (as reported)
Weakness: CWE-689, CWE-426 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch patch
- https://www.openwall.com/lists/oss-security/2025/05/22/2 mailing-list, exploit
- https://github.com/Perl/perl5/issues/23010 issue-tracking
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226 related
- https://github.com/Perl/perl5/issues/10387 related
- https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads related
- https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e related
- http://www.openwall.com/lists/oss-security/2025/05/23/1
- http://www.openwall.com/lists/oss-security/2025/05/30/4
- http://www.openwall.com/lists/oss-security/2025/06/02/2
- http://www.openwall.com/lists/oss-security/2025/06/02/5
- http://www.openwall.com/lists/oss-security/2025/06/02/6
- http://www.openwall.com/lists/oss-security/2025/06/02/7
- http://www.openwall.com/lists/oss-security/2025/06/03/1
- http://seclists.org/fulldisclosure/2025/Sep/55
- http://seclists.org/fulldisclosure/2025/Sep/54
- http://seclists.org/fulldisclosure/2025/Sep/53
- https://lists.debian.org/debian-lts-announce/2026/04/msg00018.html