Security Advisories (1)
CVE-2025-3051 (2025-04-01)

Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672

NAME

Linux::Statm::Tiny - simple access to Linux /proc/../statm

SYNOPSIS

use Linux::Statm::Tiny;

my $stats = Linux::Statm::Tiny->new( pid => $$ );

my $size = $stats->size;

DESCRIPTION

This class returns the Linux memory stats from /proc/$pid/statm.

ATTRIBUTES

pid

The PID to obtain stats for. If omitted, it uses the current PID from $$.

statm

The raw array reference of values.

size

Total program size, in pages.

resident

Resident set size (RSS), in pages.

share

Shared pages.

text

Text (code).

lib

Library (unused in Linux 2.6).

data

Data + Stack.

dt

Dirty pages (unused in Linux 2.6).

SEE ALSO

proc(5).

AUTHOR

Robert Rothenberg rrwo@thermeon.com

COPYRIGHT

Copyright 2014, Thermeon Worldwide, PLC.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

This program is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose.