Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.
When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.
A pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Sep 25, 2026 | Jul 13, 2026 |
| Debian | — | Upgrade perl | Sep 21, 2026 | Jul 13, 2026 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory14 | Sep 28, 2026 | Sep 28, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Oct 1, 2026 | Jul 13, 2026 |
| Redhat_linux | — | Upgrade perl-libsUpgrade perl-CPAN-MetaUpgrade perl-NDBM_File-debuginfoUpgrade perl-ExtUtils-CommandUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Text-ParseWordsUpgrade perl-Sys-SyslogUpgrade perl-User-pwentUpgrade perl-Devel-Size-debugsourceUpgrade perl-Time-LocalUpgrade perl-utilsUpgrade perl-Test-HarnessUpgrade perl-debuggerUpgrade perl-Math-BigInt-FastCalc-debuginfoUpgrade perl-Compress-Raw-Zlib-debugsourceUpgrade perl-Algorithm-DiffUpgrade perl-GDBM_FileUpgrade perl-threadsUpgrade perl-B-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-IPC-CmdUpgrade perl-File-FindUpgrade perl-MRO-CompatUpgrade perl-MIME-Base64-debugsourceUpgrade perl-ODBM_File-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-Math-BigIntUpgrade perl-libUpgrade perl-Encode-LocaleUpgrade perl-IO-debuginfoUpgrade perl-debugsourceUpgrade perl-File-WhichUpgrade perl-Socket-debugsourceUpgrade perl-threads-shared-debuginfoUpgrade perl-AutoSplitUpgrade perl-Data-Dumper-debuginfoUpgrade perl-local-libUpgrade perl-Hash-UtilUpgrade perl-IPC-System-SimpleUpgrade perl-Encode-develUpgrade perl-Module-LoadUpgrade perl-IO-Compress-LzmaUpgrade perl-Compress-Raw-Lzma-debuginfoUpgrade perl-DB_FileUpgrade perl-Unicode-Normalize-debuginfoUpgrade perl-Class-StructUpgrade perl-encodingUpgrade perl-Pod-PerldocUpgrade perl-ExtUtils-MiniperlUpgrade perl-SelectSaverUpgrade perl-version-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perlUpgrade perl-podlatorsUpgrade perl-Digest-MD5-debuginfoUpgrade perl-Module-Load-ConditionalUpgrade perl-Fcntl-debuginfoUpgrade perl-sortUpgrade perl-DynaLoader-debuginfoUpgrade perl-IPC-SysVUpgrade perl-NDBM_FileNo solution existsUpgrade perl-Getopt-LongUpgrade perl-PathToolsUpgrade perl-ODBM_FileUpgrade perl-Pod-FunctionsUpgrade perl-Module-BuildUpgrade perl-mroUpgrade perl-phUpgrade perl-Data-SectionUpgrade perl-Text-GlobUpgrade perl-Unicode-Collate-debugsourceUpgrade perl-POSIX-debuginfoUpgrade perl-URIUpgrade perl-Unicode-Collate-debuginfoUpgrade perl-Module-MetadataUpgrade perl-overloadingUpgrade perl-File-DosGlobUpgrade perl-Test-SimpleUpgrade perl-encoding-warningsUpgrade perl-deprecateUpgrade perl-constantUpgrade perl-FileHandleUpgrade perl-EnglishUpgrade perl-Devel-SizeUpgrade perl-FileCacheUpgrade perl-Text-TemplateUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-CoreListUpgrade perl-filetestUpgrade perl-Unicode-CollateUpgrade perl-Storable-debugsourceUpgrade perl-subsUpgrade perl-Compress-Raw-Bzip2-debuginfoUpgrade perl-POSIXUpgrade perl-NEXTUpgrade perl-IO-ZlibUpgrade perl-sigtrapUpgrade perl-develUpgrade perl-Locale-MaketextUpgrade perl-localeUpgrade perl-Params-Util-debuginfoUpgrade perl-DB_File-debuginfoUpgrade perl-TestUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Math-ComplexUpgrade perl-Encode-debuginfoUpgrade perl-ImporterUpgrade perl-Params-Util-debugsourceUpgrade perl-Compress-Raw-Bzip2Upgrade perl-autouseUpgrade perl-NetUpgrade perl-threads-debugsourceUpgrade perl-Compress-Raw-Zlib-debuginfoUpgrade perl-Time-HiRes-debugsourceUpgrade perl-EncodeUpgrade perl-IPC-SysV-debugsourceUpgrade perl-FindBinUpgrade perl-Scalar-List-Utils-debuginfoUpgrade perl-ExtUtils-MM-UtilsUpgrade perl-Unicode-UCDUpgrade perl-I18N-LangTagsUpgrade perl-versionUpgrade perl-Compress-Raw-Lzma-debugsourceUpgrade perl-CPAN-DistnameInfoUpgrade perl-Object-HashBaseUpgrade perl-PathTools-debugsourceUpgrade perl-inc-latestUpgrade perl-Pod-CheckerUpgrade perl-testsUpgrade perl-Data-OptListUpgrade perl-ExtUtils-ConstantUpgrade perl-Filter-debuginfoUpgrade perl-libnetUpgrade perl-Config-ExtensionsUpgrade perl-SocketUpgrade perl-FilterUpgrade perl-experimentalUpgrade perl-generatorsUpgrade perl-Pod-HtmlUpgrade perl-DynaLoaderUpgrade perl-Pod-ParserUpgrade perl-SymbolUpgrade perl-CPAN-Meta-RequirementsUpgrade perl-EnvUpgrade perl-OpcodeUpgrade perl-IPC-Open3Upgrade perl-I18N-CollateUpgrade perl-BenchmarkUpgrade perl-IO-CompressUpgrade perl-DigestUpgrade perl-Compress-Bzip2-debugsourceUpgrade perl-File-CompareUpgrade perl-Hash-Util-FieldHashUpgrade perl-Unicode-NormalizeUpgrade perl-Digest-MD5-debugsourceUpgrade perl-version-debugsourceUpgrade perl-Params-CheckUpgrade perl-Hash-Util-debuginfoUpgrade perl-threads-shared-debugsourceUpgrade perl-Module-CoreList-toolsUpgrade perl-Archive-ZipUpgrade perl-varsUpgrade perl-Time-HiRes-debuginfoUpgrade perl-Term-TableUpgrade perl-Scalar-List-Utils-debugsourceUpgrade perl-Pod-EscapesUpgrade perl-PathTools-debuginfoUpgrade perl-File-CopyUpgrade perl-ExtUtils-CBuilderUpgrade perl-debuginfoUpgrade perl-fieldsUpgrade perl-Digest-MD5Upgrade perl-Time-PieceUpgrade perl-Digest-SHA-debuginfoUpgrade perl-Socket-debuginfoUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Config-Perl-VUpgrade perl-Compress-Raw-LzmaUpgrade perl-Package-GeneratorUpgrade perl-Text-BalancedUpgrade perl-Pod-UsageUpgrade perl-Object-HashBase-toolsUpgrade perl-Compress-Bzip2-debuginfoUpgrade perl-Devel-PPPort-debugsourceUpgrade perl-MIME-Base64Upgrade perl-ExtUtils-InstallUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Compress-Bzip2Upgrade perl-I18N-Langinfo-debuginfoUpgrade perl-ExporterUpgrade perl-Sys-Syslog-debuginfoUpgrade perl-Term-ANSIColorUpgrade perl-Storable-debuginfoUpgrade perl-ThreadUpgrade perl-Filter-SimpleUpgrade perl-SelfLoaderUpgrade perl-MIME-Base64-debuginfoUpgrade perl-Text-DiffUpgrade perl-IO-Socket-IPUpgrade perl-DumpvalueUpgrade perl-diagnosticsUpgrade perl-IOUpgrade perl-File-BasenameUpgrade perl-Devel-PPPort-debuginfoUpgrade perl-blibUpgrade perl-AutoLoaderUpgrade perl-Sys-Syslog-debugsourceUpgrade perl-Math-BigInt-FastCalc-debugsourceUpgrade perl-Unicode-Normalize-debugsourceUpgrade perl-vmsishUpgrade perl-Text-Tabs+WrapUpgrade perl-Sys-HostnameUpgrade perl-MemoizeUpgrade perl-Pod-SimpleUpgrade perl-Devel-Size-debuginfoUpgrade perl-Time-HiResUpgrade perl-Perl-OSTypeUpgrade perl-Sub-InstallUpgrade perl-Devel-PeekUpgrade perl-File-PathUpgrade perl-File-statUpgrade perl-File-DosGlob-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-Math-BigRatUpgrade perl-HTTP-TinyUpgrade perl-DirHandleUpgrade perl-interpreter-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Digest-SHAUpgrade perl-macrosUpgrade perl-parentUpgrade perl-openUpgrade perl-interpreterUpgrade perl-mro-debuginfoUpgrade perl-bignumUpgrade perl-Digest-SHA-debugsourceUpgrade perl-Devel-PPPortUpgrade perl-DB_File-debugsourceUpgrade perl-Compress-Raw-Bzip2-debugsourceUpgrade perl-TimeUpgrade perl-autodieUpgrade perl-CPAN-Meta-YAMLUpgrade perl-perlfaqUpgrade perl-meta-notationUpgrade perl-homedirUpgrade perl-PerlIO-via-QuotedPrintUpgrade perl-Term-ReadLineUpgrade perl-SafeUpgrade perl-CPANUpgrade perl-threads-sharedUpgrade perl-Term-CapUpgrade perl-libnetcfgUpgrade perl-FcntlUpgrade perl-File-HomeDirUpgrade perl-Filter-debugsourceUpgrade perl-Net-PingUpgrade perl-Term-CompleteUpgrade perl-Time-Piece-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-Thread-SemaphoreUpgrade perl-Sub-ExporterUpgrade perl-Software-LicenseUpgrade perl-overloadUpgrade perl-Math-BigInt-FastCalcUpgrade perl-Getopt-StdUpgrade perl-File-TempUpgrade perl-Fedora-VSPUpgrade perl-BUpgrade perl-Archive-TarUpgrade perl-lessUpgrade perl-ifUpgrade perl-JSON-PPUpgrade perl-ExtUtils-ManifestUpgrade perl-docUpgrade perl-Data-Dumper-debugsourceUpgrade perl-Compress-Raw-ZlibUpgrade perl-Tie-RefHashUpgrade perl-DBM_FilterUpgrade perl-Params-UtilUpgrade perl-threads-debuginfoUpgrade perl-Text-AbbrevUpgrade perl-StorableUpgrade perl-Search-DictUpgrade perl-TieUpgrade perl-Scalar-List-UtilsUpgrade perl-ExtUtils-EmbedUpgrade perl-CarpUpgrade perl-Attribute-HandlersUpgrade perl-Module-LoadedUpgrade perl-ErrnoUpgrade perl-File-FetchUpgrade perl-Data-DumperUpgrade perl-IPC-SysV-debuginfoUpgrade perl-Encode-debugsourceUpgrade perl-baseUpgrade perl-Tie-FileUpgrade perl-Thread-Queue | Aug 26, 2026 | Jul 13, 2026 |
| Rocky_linux | — | Upgrade perl-Params-Util-debugsourceUpgrade perl-Compress-Raw-Lzma-debugsourceUpgrade perl-versionUpgrade perl-Socket-debugsourceUpgrade perl-File-DosGlobUpgrade perl-IO-debuginfoUpgrade perl-Data-Dumper-debugsourceUpgrade perl-Data-Dumper-debuginfoUpgrade perl-Unicode-Collate-debugsourceUpgrade perl-NDBM_File-debuginfoUpgrade perl-Filter-debugsourceUpgrade perl-Devel-Size-debugsourceUpgrade perl-DB_File-debugsourceUpgrade perl-Compress-Bzip2-debuginfoUpgrade perl-Math-BigInt-FastCalc-debuginfoUpgrade perl-POSIXUpgrade perl-I18N-LanginfoUpgrade perl-Digest-MD5-debuginfoUpgrade perl-Unicode-Normalize-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-NDBM_FileUpgrade perl-Compress-Raw-Zlib-debuginfoUpgrade perl-Scalar-List-Utils-debugsourceUpgrade perl-POSIX-debuginfoUpgrade perl-DynaLoaderUpgrade perl-Devel-Peek-debuginfoUpgrade perl-debugsourceUpgrade perl-ODBM_FileUpgrade perl-MIME-Base64-debugsourceUpgrade perl-IPC-SysV-debuginfoUpgrade perl-Hash-UtilUpgrade perl-Params-UtilUpgrade perl-develUpgrade perl-StorableUpgrade perl-GDBM_FileUpgrade perl-Scalar-List-Utils-debuginfoUpgrade perl-Unicode-Collate-debuginfoUpgrade perl-Time-HiRes-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-FcntlUpgrade perl-mroUpgrade perl-DB_File-debuginfoUpgrade perl-Devel-SizeUpgrade perl-Devel-PPPort-debugsourceUpgrade perl-EncodeUpgrade perl-mro-debuginfoUpgrade perl-IPC-SysV-debugsourceUpgrade perl-IOUpgrade perl-Filter-debuginfoUpgrade perl-Devel-Size-debuginfoUpgrade perl-Math-BigInt-FastCalc-debugsourceUpgrade perl-Time-HiRes-debugsourceUpgrade perl-Storable-debuginfoUpgrade perl-PathTools-debugsourceUpgrade perl-Params-Util-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perl-encodingUpgrade perl-Digest-MD5Upgrade perl-Compress-Raw-Bzip2Upgrade perl-testsUpgrade perl-threadsUpgrade perl-Unicode-CollateUpgrade perl-Time-HiResUpgrade perl-threads-shared-debuginfoUpgrade perl-Sys-Syslog-debuginfoUpgrade perl-phUpgrade perl-libsUpgrade perl-Compress-Raw-Bzip2-debugsourceUpgrade perl-DB_FileUpgrade perl-Compress-Raw-ZlibUpgrade perl-Compress-Bzip2Upgrade perl-Compress-Raw-Lzma-debuginfoUpgrade perl-Digest-MD5-debugsourceUpgrade perl-Hash-Util-debuginfoUpgrade perl-Storable-debugsourceUpgrade perl-interpreter-debuginfoUpgrade perl-macrosUpgrade perl-Data-DumperUpgrade perl-threads-debugsourceUpgrade perl-Compress-Raw-Zlib-debugsourceUpgrade perl-debuginfoUpgrade perl-Socket-debuginfoUpgrade perl-Sys-SyslogUpgrade perl-MIME-Base64-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-PPPortUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Devel-PPPort-debuginfoUpgrade perl-B-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-BUpgrade perl-Unicode-Normalize-debugsourceUpgrade perl-version-debuginfoUpgrade perl-Time-PieceUpgrade perl-Unicode-NormalizeUpgrade perl-threads-debuginfoUpgrade perl-threads-shared-debugsourceUpgrade perl-Sys-HostnameUpgrade perl-IPC-SysVUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Compress-Raw-LzmaUpgrade perl-Scalar-List-UtilsUpgrade perl-Sys-Syslog-debugsourceUpgrade perl-Digest-SHA-debuginfoUpgrade perl-Compress-Bzip2-debugsourceUpgrade perl-Compress-Raw-Bzip2-debuginfoUpgrade perl-threads-sharedUpgrade perl-interpreterUpgrade perl-Opcode-debuginfoUpgrade perl-PathTools-debuginfoUpgrade perl-DynaLoader-debuginfoUpgrade perl-SocketUpgrade perl-Math-BigInt-FastCalcUpgrade perlUpgrade perl-MIME-Base64Upgrade perl-Digest-SHAUpgrade perl-PathToolsUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-OpcodeUpgrade perl-FilterUpgrade perl-Hash-Util-FieldHashUpgrade perl-libUpgrade perl-Encode-debugsourceUpgrade perl-libs-debuginfoUpgrade perl-version-debugsourceUpgrade perl-Encode-debuginfoUpgrade perl-Encode-develUpgrade perl-Digest-SHA-debugsourceUpgrade perl-Errno | Sep 16, 2026 | Sep 14, 2026 |
| Ubuntu | — | Upgrade libperl5.40Upgrade perl-modules-5.26 (Ubuntu Pro)Upgrade libperl5.34Upgrade perl-modules-5.30 (Ubuntu Pro)Upgrade libperl5.30 (Ubuntu Pro)Upgrade perlUpgrade perl-baseUpgrade libperl5.26 (Ubuntu Pro)Upgrade libperl5.18 (Ubuntu Pro)Upgrade perl-modules-5.34Upgrade perl-modules (Ubuntu Pro)Upgrade perl-modules-5.38Upgrade libperl5.22 (Ubuntu Pro)Upgrade perl-modules-5.40Upgrade perl-modules-5.22 (Ubuntu Pro)Upgrade perl-base (Ubuntu Pro) | Aug 26, 2026 | Aug 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 10, 2026 | Jul 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub