Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-97399

Fixed in a distro release EPSS <1%CVSS 3.7

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Published 2026-09-28 · CVE record · OSV

Products: The GNU C Library glibc

Distro releases

ReleasePackageFixed in
Chainguardglibc-2.430
Chainguardglibc-2.43-abi-report0
Chainguardglibc-2.43-dev0
Chainguardglibc-2.43-iconv0
Chainguardglibc-2.43-locale-ca0
Chainguardglibc-2.43-locale-de0
Chainguardglibc-2.43-locale-en0
Chainguardglibc-2.43-locale-es0
Chainguardglibc-2.43-locale-extra0
Chainguardglibc-2.43-locale-fr0
Chainguardglibc-2.43-locale-posix0
Chainguardglibc-2.43-locales0
Chainguardglibc-2.43-testresults0
Chainguardglibc-2.43-tracing0
Chainguardglibc-2.440
Chainguardglibc-2.44no fix
Chainguardglibc-2.44-abi-report0
Chainguardglibc-2.44-devno fix
Chainguardglibc-2.44-iconv0
Chainguardglibc-2.44-iconvno fix
Chainguardglibc-2.44-locale-cano fix
Chainguardglibc-2.44-locale-ca0
Chainguardglibc-2.44-locale-de0
Chainguardglibc-2.44-locale-deno fix
Chainguardglibc-2.44-locale-en0
Chainguardglibc-2.44-locale-esno fix
Chainguardglibc-2.44-locale-extrano fix
Chainguardglibc-2.44-locale-extra0
Chainguardglibc-2.44-locale-fr0
Chainguardglibc-2.44-locale-frno fix
Chainguardglibc-2.44-locale-posixno fix
Chainguardglibc-2.44-localesno fix
Chainguardglibc-2.44-locales0
Chainguardglibc-2.44-testresults0
Chainguardglibc-2.44-tracing0
Chainguardld-linux-2.430
Chainguardld-linux-2.440
Chainguardld-linux-2.44no fix
Chainguardlibc-bin-2.430
Chainguardlibc-bin-2.44no fix
Chainguardlibcrypt1-2.430
Chainguardlibcrypt1-2.440
Chainguardlibcrypt1-2.44no fix
Chainguardlocaledef-2.430
Chainguardlocaledef-2.44no fix
Chainguardnscd-2.430
Chainguardnscd-2.440
Chainguardnss-db-2.430
Chainguardnss-db-2.440
Chainguardnss-db-2.44no fix
Chainguardnss-hesiod-2.430
Chainguardnss-hesiod-2.440
Chainguardpcprofiledump-2.430
Chainguardpcprofiledump-2.44no fix
Chainguardpcprofiledump-2.440
Chainguardposix-libc-utils-2.430
Chainguardposix-libc-utils-2.44no fix
Chainguardposix-libc-utils-2.440
Chainguardposix-libc-utils-bin-2.430
Chainguardposix-libc-utils-bin-2.44no fix
Chainguardsln-2.430
Chainguardsln-2.440
Chainguardsln-2.44no fix
Chainguardsotruss-2.430
Chainguardsotruss-2.44no fix
Chainguardtzutils-2.430
Chainguardtzutils-2.440
Chainguardtzutils-2.44no fix
Debian 12glibcno fix
Debian 13glibcno fix
Debian 14glibc2.43-7
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSglibc2.31-150300.109.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSglibc2.31-150300.109.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSglibc2.31-150300.109.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSglibc2.31-150300.109.1
SUSE Linux Enterprise Micro 5.3glibc2.31-150300.109.1
SUSE Linux Enterprise Micro 5.4glibc2.31-150300.109.1
SUSE Linux Enterprise Micro 5.5glibc2.31-150300.109.1
SUSE Linux Enterprise Module for Basesystem 15 SP7glibc2.38-150600.14.61.1
SUSE Linux Enterprise Module for Development Tools 15 SP7glibc2.38-150600.14.61.1
SUSE Linux Enterprise Server 15 SP4-LTSSglibc2.31-150300.109.1
SUSE Linux Enterprise Server 15 SP5-LTSSglibc2.31-150300.109.1
SUSE Linux Enterprise Server 15 SP6-LTSSglibc2.38-150600.14.61.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4glibc2.31-150300.109.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5glibc2.31-150300.109.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6glibc2.38-150600.14.61.1
Ubuntu 22.04 LTSglibcno fix
Ubuntu 24.04 LTSglibcno fix
Ubuntu 26.04 LTSglibcno fix
Ubuntu Pro 14.04 LTSeglibcno fix
Ubuntu Pro 16.04 LTSglibcno fix
Ubuntu Pro 18.04 LTSglibcno fix
Ubuntu Pro 20.04 LTSglibcno fix
Wolfiglibc-2.430
Wolfiglibc-2.43-abi-report0
Wolfiglibc-2.43-dev0
Wolfiglibc-2.43-iconv0
Wolfiglibc-2.43-locale-ca0
Wolfiglibc-2.43-locale-de0
Wolfiglibc-2.43-locale-en0
Wolfiglibc-2.43-locale-es0
Wolfiglibc-2.43-locale-extra0
Wolfiglibc-2.43-locale-fr0
Wolfiglibc-2.43-locale-posix0
Wolfiglibc-2.43-locales0
Wolfiglibc-2.43-testresults0
Wolfiglibc-2.43-tracing0
Wolfiglibc-2.440
Wolfiglibc-2.44no fix
Wolfiglibc-2.44-abi-report0
Wolfiglibc-2.44-devno fix
Wolfiglibc-2.44-iconvno fix
Wolfiglibc-2.44-iconv0
Wolfiglibc-2.44-locale-ca0
Wolfiglibc-2.44-locale-cano fix
Wolfiglibc-2.44-locale-deno fix
Wolfiglibc-2.44-locale-de0
Wolfiglibc-2.44-locale-en0
Wolfiglibc-2.44-locale-esno fix
Wolfiglibc-2.44-locale-extrano fix
Wolfiglibc-2.44-locale-extra0
Wolfiglibc-2.44-locale-fr0
Wolfiglibc-2.44-locale-frno fix
Wolfiglibc-2.44-locale-posixno fix
Wolfiglibc-2.44-locales0
Wolfiglibc-2.44-localesno fix
Wolfiglibc-2.44-testresults0
Wolfiglibc-2.44-tracing0
Wolfild-linux-2.430
Wolfild-linux-2.44no fix
Wolfild-linux-2.440
Wolfilibc-bin-2.430
Wolfilibc-bin-2.44no fix
Wolfilibcrypt1-2.430
Wolfilibcrypt1-2.44no fix
Wolfilibcrypt1-2.440
Wolfilocaledef-2.430
Wolfilocaledef-2.44no fix
Wolfinscd-2.430
Wolfinscd-2.440
Wolfinss-db-2.430
Wolfinss-db-2.44no fix
Wolfinss-db-2.440
Wolfinss-hesiod-2.430
Wolfinss-hesiod-2.440
Wolfipcprofiledump-2.430
Wolfipcprofiledump-2.44no fix
Wolfipcprofiledump-2.440
Wolfiposix-libc-utils-2.430
Wolfiposix-libc-utils-2.44no fix
Wolfiposix-libc-utils-2.440
Wolfiposix-libc-utils-bin-2.430
Wolfiposix-libc-utils-bin-2.44no fix
Wolfisln-2.430
Wolfisln-2.44no fix
Wolfisln-2.440
Wolfisotruss-2.430
Wolfisotruss-2.44no fix
Wolfitzutils-2.430
Wolfitzutils-2.44no fix
Wolfitzutils-2.440
openSUSE Tumbleweedglibc2.44-3.1