CVE-2026-89161
Fixed in a distro release EPSS <1%CVSS 7.4
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
Products: pcre2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | mariadb11.8 | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-backup | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-client-utils | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-common | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-devel | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-embedded | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-embedded-devel | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-errmsg | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-gssapi-server | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-oqgraph-engine | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-pam | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-server | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-server-galera | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-server-utils | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | mariadb11.8-test | 3:11.8.8-2.el10_2.alma.2 |
| AlmaLinux 10 | pcre2 | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-devel | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-static | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-syntax | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-tools | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-utf16 | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-utf32 | 10.44-1.5.el10_2 |
| AlmaLinux 9 | pcre2 | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-devel | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-syntax | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-tools | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-utf16 | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-utf32 | 10.40-7.el9_8 |
| Alpine 3.21 | pcre2 | 10.43-r1 |
| Alpine 3.22 | pcre2 | 10.46-r1 |
| Alpine 3.23 | pcre2 | 10.48-r0 |
| Alpine 3.24 | pcre2 | 10.48-r0 |
| Amazon Linux 2023 | pcre2 | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-devel | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-static | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-syntax | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-tools | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-utf16 | 10.40-1.amzn2023.0.4 |
| Amazon Linux 2023 | pcre2-utf32 | 10.40-1.amzn2023.0.4 |
| Debian 12 | pcre2 | 10.42-1+deb12u1 |
| Debian 13 | pcre2 | 10.46-1~deb13u2 |
| Debian 14 | pcre2 | 10.48-1 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8 | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-client-utils | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-common | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debugsource | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-devel | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-devel | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-errmsg | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-utils | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test-debuginfo | 3:11.8.8-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-debugsource | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-devel | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-static | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-syntax | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-tools | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-tools-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf16 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf16-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf32 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf32-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 9 | pcre2 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-debugsource | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-devel | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-syntax | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-tools | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-tools-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf16 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf16-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf32 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf32-debuginfo | 0:10.40-7.el9_8 |
| Red Hat hummingbird 1 | pcre2 | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-devel | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-static | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-syntax | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-tools | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-utf16 | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-utf32 | 0:10.48-0.1.hum1 |
| Red Hat rhel e4s 9.2 | pcre2 | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-debuginfo | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-debugsource | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-devel | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-syntax | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-tools-debuginfo | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-utf16 | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-utf16-debuginfo | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.2 | pcre2-utf32 | 0:10.40-2.el9_2.1 |
| Red Hat rhel e4s 9.4 | pcre2 | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-debuginfo | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-debugsource | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-devel | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-syntax | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-tools-debuginfo | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-utf16 | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-utf16-debuginfo | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-utf32 | 0:10.40-5.el9_4.1 |
| Red Hat rhel e4s 9.4 | pcre2-utf32-debuginfo | 0:10.40-5.el9_4.1 |
| Red Hat rhel eus 9.6 | pcre2 | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-debuginfo | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-debugsource | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-devel | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-syntax | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-tools | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-tools-debuginfo | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-utf16 | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-utf16-debuginfo | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-utf32 | 0:10.40-6.el9_6.1 |
| Red Hat rhel eus 9.6 | pcre2-utf32-debuginfo | 0:10.40-6.el9_6.1 |
| Rocky Linux 10 | mariadb11.8 | 3:11.8.8-2.el10_2 |
| Rocky Linux 10 | pcre2 | 0:10.44-1.5.el10_2 |
| Rocky Linux 9 | pcre2 | 0:10.40-7.el9_8 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.3 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.4 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.5 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | pcre2 | 10.34-1.16.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server 16.0 | pcre2 | 10.45-160000.4.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | pcre2 | 10.34-1.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | pcre2 | 10.45-160000.4.1 |
| SUSE Linux Micro 6.0 | pcre2 | 10.42-3.1 |
| SUSE Linux Micro 6.1 | pcre2 | 10.42-slfo.1.1_2.1 |
| SUSE Linux Micro 6.2 | pcre2 | 10.45-160000.4.1 |
| Ubuntu 20.04 LTS | pcre2 | no fix |
| Ubuntu 22.04 LTS | pcre2 | no fix |
| Ubuntu 24.04 LTS | pcre2 | no fix |
| Ubuntu 26.04 LTS | pcre2 | no fix |
| Ubuntu 26.10 | pcre2 | no fix |
| openSUSE Leap 16.0 | pcre2 | 10.45-160000.4.1 |