Every CVE Search/ Get API key

CVE-2026-97399

One-byte overread in strncasecmp on Power8

3.7 LowFix available

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.28%Unchanged since Sep 29, 2026
90%50%10%1%

What each source reports

CVE List Score used 3.7

One-byte overread in strncasecmp on Power8

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
CVE-2026-97399
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-126
Updated
2026-11-02
EUVDEUVD-2026-88320 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
EUVD-2026-88320
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-qhjw-2xw3-v2hv 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8...

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
GHSA-qhjw-2xw3-v2hv
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-126
Updated
2026-11-02
NVD 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
CVE-2026-97399
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-126
Updated
2026-11-02
OSVDEBIAN-CVE-2026-97399 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
DEBIAN-CVE-2026-97399
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-97399 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
UBUNTU-CVE-2026-97399
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 6 moreShow less
OSVAZL-104976 No score

CVE-2026-97399 affecting package glibc 2.38-21

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.

This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Record
AZL-104976
Updated
2026-11-02
OSVopenSUSE-SU-2026:12072-1 No score

glibc-2.44-3.1 on GA media

These are all security issues fixed in the glibc-2.44-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12072-1
Updated
2026-11-02
OSVSUSE-SU-2026:24281-1 No score

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2026-8674: reachable assert in resolv/resolv_conf.c:update_from_conf allows an attacker in a local network to trigger a process crash (bsc#1281297).
  • CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
  • CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
  • CVE-2026-97399: one byte out-of-bounds read via function strncasecmp on Power8 can lead to a program crash (bsc#1283147).
Record
SUSE-SU-2026:24281-1
Updated
2026-11-02
OSVSUSE-SU-2026:24326-1 No score

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2026-8674: reachable assert in resolv/resolv_conf.c:update_from_conf allows an attacker in a local network to trigger a process crash (bsc#1281297).
  • CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
  • CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
  • CVE-2026-97399: one byte out-of-bounds read via function strncasecmp on Power8 can lead to a program crash (bsc#1283147).
Record
SUSE-SU-2026:24326-1
Updated
2026-11-02
OSVSUSE-SU-2026:4591-1 No score

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726).
  • CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723).
  • CVE-2026-8674: reachable assert in resolv/resolv_conf.c:update_from_conf allows an attacker in a local network to trigger a process crash (bsc#1281297).
  • CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262).
  • CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946).
  • CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921).
  • CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922).
  • CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
  • CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
  • CVE-2026-97399: one byte out-of-bounds read via function strncasecmp on Power8 can lead to a program crash (bsc#1283147).
Record
SUSE-SU-2026:4591-1
Updated
2026-11-02
OSVSUSE-SU-2026:4656-1 No score

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2026-8674: reachable assert in resolv/resolv_conf.c:update_from_conf allows an attacker in a local network to trigger a process crash (bsc#1281297).
  • CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
  • CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
  • CVE-2026-97399: one byte out-of-bounds read via function strncasecmp on Power8 can lead to a program crash (bsc#1283147).
Record
SUSE-SU-2026:4656-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Azure Linux:3
 through 2.38-21 None known
glibc
Debian:12
 All versions, plus listed versions
2.36-10~02.36-92.36-9+deb12u12.36-9+deb12u102.36-9+deb12u11
Show 45 moreShow less
2.36-9+deb12u122.36-9+deb12u132.36-9+deb12u142.36-9+deb12u22.36-9+deb12u32.36-9+deb12u42.36-9+deb12u52.36-9+deb12u62.36-9+deb12u72.36-9+deb12u82.36-9+deb12u92.36-9+loong642.37-12.37-102.37-112.37-122.37-132.37-142.37-152.37-15.12.37-15.1+sh42.37-15~deb13u12.37-162.37-172.37-182.37-192.37-22.37-32.37-42.37-52.37-62.37-72.37-82.37-92.38-12.38-102.38-112.38-122.38-12.12.38-132.38-142.38-15~02.38-15~12.38-22.38-3
 None known
glibc
Debian:13
 All versions, plus listed versions
2.41-122.41-12+deb13u12.41-12+deb13u22.41-12+deb13u32.41-12+deb13u4
Show 37 moreShow less
2.41-13~hurd.02.41-13~hurd.12.42-12.42-102.42-112.42-122.42-12~hurd.12.42-132.42-142.42-14~hurd.12.42-152.42-15~hurd.12.42-162.42-172.42-22.42-32.42-42.42-52.42-62.42-72.42-82.42-8~hurd.12.42-8~hurd.22.42-92.43-12.43-22.43-32.43-3+m68k2.43-42.43-4+m68k2.43-52.43-62.43-72.43-7~hurd.12.44-12.44-22.44-3
 None known
glibc
Debian:14
 before 2.43-7, plus listed versions
2.41-122.41-13~hurd.02.41-13~hurd.12.42-12.42-10
Show 29 moreShow less
2.42-112.42-122.42-12~hurd.12.42-132.42-142.42-14~hurd.12.42-152.42-15~hurd.12.42-162.42-172.42-22.42-32.42-42.42-52.42-62.42-72.42-82.42-8~hurd.12.42-8~hurd.22.42-92.43-12.43-22.43-32.43-3+m68k2.43-42.43-4+m68k2.43-52.43-62.43-7~hurd.1
2.43-7
glibc
SUSE:Linux Micro 6.1
From an advisory covering 4 CVEs
 before 2.38-slfo.1.1_11.1
2.38-slfo.1.1_11.1
glibc
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 2.38-159998.1.1
2.38-159998.1.1
glibc
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
Show 19 moreShow less
Affected packages
PackageAffectedFixed
glibc
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 10 CVEs
 before 2.31-150300.109.1
2.31-150300.109.1
glibc
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 4 CVEs
 before 2.38-150600.14.61.1
2.38-150600.14.61.1
glibc
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 4 CVEs
 before 2.38-150600.14.61.1
2.38-150600.14.61.1
glibc
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 2.38-150600.14.61.1
2.38-150600.14.61.1
glibc
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 2.38-150600.14.61.1
2.38-150600.14.61.1
eglibc
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.17-93ubuntu42.18-0ubuntu12.18-0ubuntu22.18-0ubuntu42.18-0ubuntu5
Show 24 moreShow less
2.18-0ubuntu62.18-0ubuntu72.19-0ubuntu22.19-0ubuntu32.19-0ubuntu42.19-0ubuntu52.19-0ubuntu62.19-0ubuntu6.12.19-0ubuntu6.32.19-0ubuntu6.42.19-0ubuntu6.52.19-0ubuntu6.62.19-0ubuntu6.72.19-0ubuntu6.82.19-0ubuntu6.92.19-0ubuntu6.102.19-0ubuntu6.112.19-0ubuntu6.132.19-0ubuntu6.142.19-0ubuntu6.152.19-0ubuntu6.15+esm12.19-0ubuntu6.15+esm22.19-0ubuntu6.15+esm32.19-0ubuntu6.15+esm4
 None known
glibc
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.21-0ubuntu42.21-0ubuntu52.21-0ubuntu62.23-0ubuntu12.23-0ubuntu2
Show 18 moreShow less
2.23-0ubuntu32.23-0ubuntu42.23-0ubuntu52.23-0ubuntu62.23-0ubuntu72.23-0ubuntu92.23-0ubuntu102.23-0ubuntu112.23-0ubuntu11.22.23-0ubuntu11.32.23-0ubuntu11.3+esm12.23-0ubuntu11.3+esm22.23-0ubuntu11.3+esm32.23-0ubuntu11.3+esm52.23-0ubuntu11.3+esm62.23-0ubuntu11.3+esm72.23-0ubuntu11.3+esm82.23-0ubuntu11.3+esm9
 None known
glibc
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.26-0ubuntu22.26-0ubuntu2.12.27-0ubuntu22.27-0ubuntu32.27-3ubuntu1
Show 11 moreShow less
2.27-3ubuntu1.22.27-3ubuntu1.32.27-3ubuntu1.42.27-3ubuntu1.52.27-3ubuntu1.62.27-3ubuntu1.6+esm12.27-3ubuntu1.6+esm22.27-3ubuntu1.6+esm32.27-3ubuntu1.6+esm42.27-3ubuntu1.6+esm52.27-3ubuntu1.6+esm6
 None known
glibc
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.30-0ubuntu22.30-0ubuntu32.31-0ubuntu52.31-0ubuntu62.31-0ubuntu7
Show 13 moreShow less
2.31-0ubuntu92.31-0ubuntu9.12.31-0ubuntu9.22.31-0ubuntu9.32.31-0ubuntu9.72.31-0ubuntu9.92.31-0ubuntu9.122.31-0ubuntu9.142.31-0ubuntu9.152.31-0ubuntu9.162.31-0ubuntu9.172.31-0ubuntu9.182.31-0ubuntu9.18+esm1
 None known
glibc
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.34-0ubuntu32.35-0ubuntu12.35-0ubuntu32.35-0ubuntu3.12.35-0ubuntu3.3
Show 12 moreShow less
2.35-0ubuntu3.42.35-0ubuntu3.52.35-0ubuntu3.62.35-0ubuntu3.72.35-0ubuntu3.82.35-0ubuntu3.92.35-0ubuntu3.102.35-0ubuntu3.112.35-0ubuntu3.122.35-0ubuntu3.132.35-0ubuntu3.142.35-0ubuntu3.15
 None known
glibc
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.38-1ubuntu62.38-3ubuntu12.39-0ubuntu12.39-0ubuntu22.39-0ubuntu6
Show 10 moreShow less
2.39-0ubuntu82.39-0ubuntu8.12.39-0ubuntu8.22.39-0ubuntu8.32.39-0ubuntu8.42.39-0ubuntu8.52.39-0ubuntu8.62.39-0ubuntu8.72.39-0ubuntu8.82.39-0ubuntu8.9
 None known
glibc
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.42-0ubuntu32.42-2ubuntu12.42-2ubuntu22.42-2ubuntu42.42-2ubuntu5
Show 4 moreShow less
2.43-2ubuntu12.43-2ubuntu22.43-2ubuntu2.32.43-2ubuntu2.4
 None known
glibc
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.44-3.1
2.44-3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-97399 is a low vulnerability (CVSS 3.7) in The Gnu C Library Glibc, published September 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in glibc 2.43-7.

References

Show 28 moreShow less
This page doesn't list everything

Left out here: 86 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open