CVE-2025-5745

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.40 and later

Description The issue arises from the strncmp implementation optimized for the Power10 processor, which writes to vector registers v20 to v31 without saving the contents from the caller. This can lead to overwriting of the contents and potentially altering the control flow of the caller, or leaking the input strings to the function to other parts of the program.

Recommendations For GNU C Library versions 2.40 and later, consider saving the contents of vector registers v20 to v31 before calling the strncmp function to prevent overwriting and potential control flow alteration. At the moment, there is no information about a newer version that contains a fix for this vulnerability.