K000152917: GNU C Library vulnerabilities CVE-2025-5702 and CVE-2025-5745

Security Advisory Description CVE-2025-5702 The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the...

Ubuntu: Security Advisory (USN-7634-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

glibc-2.41-3.1 on GA media (moderate)

glibc-2.41-3.1 on GA media Announcement ID: openSUSE-SU-2025:15222-1 Rating: moderate Cross-References: CVE-2025-4802 CVE-2025-5745 CVSS scores: CVE-2025-4802 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-4802 SUSE : 9.4...

Fedora: Security Advisory (FEDORA-2025-e489437b3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-851644b160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5745

creationtimestamp| type| source ---|---|--- 2025-06-05 22:42:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvfes7p3q2e 2025-06-08 06:28:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lr3ad66sbc24...

CVE-2025-5745

A flaw was found in the strncmp glibc function optimized for the Power10 architecture. Overwriting two vector registers could disrupt program control flow, possibly leading to system instability. Mitigation Mitigation for this issue is either not available or the currently available options do no...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5745

The GNU C Library (glibc) versions 2.40 and later are vulnerable via the strncmp implementation optimized for the Power10 processor . The root cause is that the function writes to vector registers v20 to v31 without saving the caller's contents. Since these are defined as non-volatile by the powe...