CVE-2026-65066

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65065 Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65064 Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in shmgeneric.h with openpath, ORDWR | OCREAT | OCLOEXEC, 0666. The mode is 0666, so under the default umask 022 the file is created mode 06...

CVE-2026-65064

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in shmgeneric.h with openpath, ORDWR | OCREAT | OCLOEXEC, 0666. The mode is 0666, so under the default umask 022 the file is created mode 06...

CVE-2026-65064

Data::HashMap::Shared versions before 0.14 for Perl are vulnerable to a local security issue due to improper file permissions and missing flags in shm_generic.h. The software creates an mmap backing file with a mode of 0666 , which defaults to 0644 (world-readable) under a standard umask. Further...

CVE-2026-65063

Data::RadixTree::Shared versions prior to 0.02 for Perl are vulnerable to insecure file creation and access. The software creates an mmap backing file in shared directories like /tmp or /dev/shm using the open() function with a mode of 0666 and without the O_EXCL or O_NOFOLLOW flags. Under a defa...

CVE-2026-65062

The Data::SortedSet::Shared Perl module (versions before 0.03 ) is vulnerable to a local security issue because it creates a world-readable mmap backing file. In sortedset.h, the open() function uses a mode of 0666 , which results in a 0644 file mode under a default umask of 022. Because the O_EX...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-64617

The Data::PubSub::Shared Perl module (versions before 0.07 ) contains a vulnerability where it creates a world-readable mmap backing file. The root cause is the use of open(path, O_RDWR|O_CREAT, 0666) in pubsub.h without the O_EXCL or O_NOFOLLOW flags. Under a default umask of 022, the file is cr...

CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64615

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64615

The Data::Graph::Shared Perl module (versions before 0.04 ) is vulnerable to insecure file handling. The software creates a world-readable mmap backing file using open(path, O_RDWR|O_CREAT, 0666), which results in mode 0644 under a default umask of 022. Because the call lacks O_EXCL , an attacker...

CVE-2026-64615 Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64614

Versions before 0.06 of Data::Deque::Shared for Perl are vulnerable to a local security issue. The component in deque.h uses open(path, O_RDWR|O_CREAT, 0666), which creates a world-readable mmap backing file (mode 0644 under a default umask of 022). Because the call lacks O_EXCL , it may silently...

CVE-2026-64614

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

PT-2026-62058

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in ndarray.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

PT-2026-62059

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in pubsub.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-64158

CVE-2026-64158 has been rejected or withdrawn by its CVE Numbering Authority. However, the underlying fix is present in vendor kernel updates. The fix addresses the netfs subsystem in the Linux kernel , specifically correcting write streaming disablement when a file descriptor is opened with O_RD...