Skip to content
OpenAdvisories
Medium USN-7678-1 1 CVE

perl vulnerability

Published Jul 29, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Perl threads incorrectly handled certain file
operations. A local attacker could possibly use this issue to load code or
access files from unexpected locations.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS perl 5.34.0-3ubuntu1.5
Ubuntu · 24.04 LTS 24.04:LTS perl 5.38.2-3.2ubuntu0.2

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-40909

    Perl threads have a working directory race condition where file operations may target unintended paths

    Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…

    perl perl perl perl Debian Ubuntu Azure Linux Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2025-40909