[Bug libc/29863] Segmentation fault in memcmp-sse2.S if memory contents can concurrently change (CVE-2026-3904)

[siddhesh at sourceware dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=29863

Siddhesh Poyarekar <siddhesh at sourceware dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |CVE-2026-3904
            Summary|Segmentation fault in       |Segmentation fault in
                   |memcmp-sse2.S if memory     |memcmp-sse2.S if memory
                   |contents can concurrently   |contents can concurrently
                   |change                      |change (CVE-2026-3904)
              Flags|                            |security+
                 CC|                            |siddhesh at sourceware dot org

--- Comment #21 from Siddhesh Poyarekar <siddhesh at sourceware dot org> ---
While memcmp is never expected to be safe with concurrent access like this,
this has ended up being a security issue in the limited context of the nscd
client, see bug 25888.  The "real" fix would be to fix the concurrency issues
in the nscd client, but this specific scenario had to be documented as a CVE,
hence marking it as such.

-- 
You are receiving this mail because:
You are on the CC list for the bug.