Skip to content
OpenAdvisories
High · 7.5 CVE-2026-41564 EUVD-2026-25201

CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking

Published Apr 23, 2026 · Updated Apr 23, 2026 · Assigned by CPANSec

Description

CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.

The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery.

This affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process.

Affected products

VendorProductAffectedFixed
MIK CryptX < 0.088 0.088

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 libcryptx-perl 0.087-2 —
Debian 13 libcryptx-perl 0.085-1+deb13u1 —
Debian 12 libcryptx-perl No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 libcryptx-perl No fix yet —
Ubuntu 26.04 LTS libcryptx-perl No fix yet —
Ubuntu 25.10 libcryptx-perl No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS libcryptx-perl No fix yet —
Ubuntu Pro 22.04 LTS libcryptx-perl No fix yet —
Ubuntu Pro 20.04 LTS libcryptx-perl No fix yet —
Ubuntu Pro 18.04 LTS libcryptx-perl No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed perl-CryptX 0.89.0-1.1 openSUSE-SU-2026:10773-1
openSUSE Leap 16.0 perl-CryptX 0.89.0-bp160.1.1 openSUSE-SU-2026:20936-1
ReleasePackageFixed inAdvisory
Alpine v3.24 perl-cryptx 0.088-r0 —
Alpine v3.23 perl-cryptx 0.088-r0 —
Alpine v3.22 perl-cryptx 0.088-r0 —
Alpine v3.21 perl-cryptx 0.088-r0 —
Alpine v3.20 perl-cryptx 0.088-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 perl-CryptX +1 0.088-2.amzn2023.0.1 ALAS2023-2026-1641

Advisories 3

References