88 matches found
SUSE-SU-2026:24281-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
SUSE-SU-2026:24326-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
Astra Linux – vulnerability in linux, linux-5.10
An issue was discovered in the Linux kernel for powerpc prior to version 5.14.15. It allows a malicious KVM guest to crash the host, specifically when the host runs on Power8, due to a bug in the implementation of arch/powerpc/kvm/book3shvrmhandlers.S related to how SRR1 register values are handl...
SUSE CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
Linux Distros Unpatched Vulnerability : CVE-2026-97399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cras...
DEBIAN-CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
AZL-104976 CVE-2026-97399 affecting package glibc 2.38-21
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
UBUNTU-CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399 One-byte overread in strncasecmp on Power8
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399 One-byte overread in strncasecmp on Power8
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
EUVD-2026-88320
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
CVE-2026-97399
The GNU C Library (glibc) 2.24 and later versions optimized for the Power8 architecture contain a one-byte overread in the strncasecmp function. This vulnerability occurs when attacker-controlled input strings match up to the edge of a memory page, causing the function to read one byte into a nei...
PT-2026-99917
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.24 and later Description The strncasecmp function, when optimized for the Power8 architecture, contains a one-byte overread. This occurs when input strings match up to the edge of their memory page and the subsequent...
CVE-2026-97399: Buffer Over-read
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...
SUSE-SU-2026:20223-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS12 MAC verification bsc1256829. - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. - CVE-2025-15468: NULL dereference in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004477)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004477 advisory. KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a stac...