I took a shot at exploiting it myself with https://github.com/9bie/php2shell-bypass-aslr-exp/tree/main, and the patches hold. I confirmed 8.4.26 is exploitable as a baseline, then tested 8.2.35, 8.3.36, 8.4.27 and 8.5.12 -> all of them resisted the exploit.
GitHubGitHub - 9bie/php2shell-bypass-aslr-expContribute to 9bie/php2shell-bypass-aslr-exp development by creating an account on GitHub.
commit 715a1a6