CVE-2026-97399

EUVD-2026-88320

28.09.2026, 16:17

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.7 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 20.85%

Debian Releases

Debian Product

Codename

glibc

bookworm	vulnerable
bookworm (security)	vulnerable
forky	2.43-7 fixed
sid	2.43-7 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

glibc

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

eglibc

jammy	dne
noble	dne
resolute	dne
trusty	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

glibc

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-32bit

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-devel

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-devel-32bit

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-devel-static

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-extra

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-i18ndata

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-info

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-lang

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-locale

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-locale-base

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-locale-base-32bit

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-profile

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

glibc-utils

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

libnsl1

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

libnsl1-32bit

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

nscd

suse enterprise desktop 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP4	2.31-150300.109.1 fixed
suse enterprise sap 15 SP5	2.31-150300.109.1 fixed
suse enterprise sap 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise sap 15 SP7	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP4	2.31-150300.109.1 fixed
suse enterprise server 15 SP5	2.31-150300.109.1 fixed
suse enterprise server 15 SP6	2.38-150600.14.61.1 fixed
suse enterprise server 15 SP7	2.38-150600.14.61.1 fixed

Common Weakness Enumeration

CWE-126 - Buffer Over-read
The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=34683

https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024

http://www.openwall.com/lists/oss-security/2026/09/28/7