PT-2026-24675 · Gnu · Gnu C Library

Siddhesh Poyarekar · Published 2026-03-11 · Updated 2026-03-15 · CVE-2026-3904

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.35 through 2.36

Description The issue relates to a potential crash in the nscd client when calling Name Service Switch (NSS)-backed functions that support caching via nscd under high load on x86 64 systems. The nscd client in the GNU C Library uses the memcmp function with inputs that may be concurrently modified by another thread. An optimized implementation of memcmp introduced in the GNU C Library version 2.36 for x86 64 could crash when invoked with such undefined behavior, leading to a potential crash of the nscd client and the application using it. This implementation was backported to the 2.35 branch, making it vulnerable as well. The issue stems from the use of the memcmp function on concurrently modified data, which can lead to spurious cache misses or, in the case of the optimized implementation, a crash.

Recommendations Apply the fix to avoid the potential crash in the nscd client for versions 2.35 through 2.36. If you have cherry-picked the memcpy SSE2 optimization in your copy of the GNU C Library, also apply the fix.

Fix

Weakness Enumeration

CWE-366

Related Identifiers

CVE-2026-3904

RHSA-2026:7316

Affected Products

Gnu C Library

References · 17

• https://ubuntu.com/security/CVE-2026-3904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3904 · Security Note
• https://sourceware.org/git/?p=glibc.git;a=commit;h=b712be52645282c706a5faa038242504feb06db5 · Patch
• https://sourceware.org/git/?p=glibc.git;a=commit;h=8804157ad9da39631703b92315460808eac86b0c · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-3904 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3904 · Vendor Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=29863 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3904 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-3904 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3904 · Vendor Advisory
• https://twitter.com/oss_security/status/2032080652074443151 · Twitter Post
• https://t.me/msrcreports/3378 · Telegram Post
• http://openwall.com/lists/oss-security/2026/03/11/5 · Note
• https://twitter.com/CVEnew/status/2033194296279749047 · Twitter Post
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0004;hb=HEAD · Note