This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-109619 →
Unrated
request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state...
UBUNTU-CVE-2026-109619
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Ubuntu:Pro:14.04:LTSphp5 |
< 5.5.9+dfsg-1ubuntu4.29+esm18→ 5.5.9+dfsg-1ubuntu4.29+esm18 |
5.5.9+dfsg-1ubuntu4.29+esm18 |
| Ubuntu:Pro:16.04:LTSphp7.0 |
< 7.0.33-0ubuntu0.16.04.16+esm22→ 7.0.33-0ubuntu0.16.04.16+esm22 |
7.0.33-0ubuntu0.16.04.16+esm22 |
| Ubuntu:Pro:18.04:LTSphp7.2 |
< 7.2.24-0ubuntu0.18.04.17+esm14→ 7.2.24-0ubuntu0.18.04.17+esm14 |
7.2.24-0ubuntu0.18.04.17+esm14 |
| Ubuntu:Pro:20.04:LTSphp7.4 |
< 7.4.3-4ubuntu2.29+esm5→ 7.4.3-4ubuntu2.29+esm5 |
7.4.3-4ubuntu2.29+esm5 |
| Ubuntu:22.04:LTSphp8.1 |
< 8.1.2-1ubuntu2.28→ 8.1.2-1ubuntu2.28 |
8.1.2-1ubuntu2.28 |
| Ubuntu:24.04:LTSphp8.3 |
< 8.3.6-0ubuntu0.24.04.13→ 8.3.6-0ubuntu0.24.04.13 |
8.3.6-0ubuntu0.24.04.13 |
| Ubuntu:26.10php8.5 |
< 8.5.9-0ubuntu2.1→ 8.5.9-0ubuntu2.1 |
8.5.9-0ubuntu2.1 |
| Ubuntu:26.04:LTSphp8.5 |
< 8.5.4-0ubuntu1.5→ 8.5.4-0ubuntu1.5 |
8.5.4-0ubuntu1.5 |
Original description The description as published by the source.
request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory ubuntu.com
- advisory ubuntu.com
- report ubuntu.com
- report cve.org
- report cisa.gov