CVE-2026-97399

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.24 and later

Description The strncasecmp() function, when optimized for the Power8 architecture, contains a one-byte overread. This occurs when input strings match up to the edge of their memory page and the subsequent page is unmapped or unreadable, potentially leading to a program crash if the input strings are attacker-controlled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.