On: There isn't an easy exploit for this PHP vulnerability

[Onavo]

Then show me how it would work on modern Linux servers that has ASLR on by default short of spamming it DoS style.

If you claim only ancient LAMP boxes are vulnerable, then that's like me saying your "your 80 year old grandma is more prone to accidents".

[Onavo → Onavo]

Also just to reply to RagingCactus's sibling comment which was somehow downvoted to death (HN users, never change.) for quoting the Wiz post, the two PHP vulnerabilities alone are still not to bypass ASLR.

CVE-2026-109619 is the main memory related vulnerability but it alone isn't enough to break OS level ASLR unless you spam it (brute forcing).