The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.8 · gnuNVD modified 2026-10-14 07:16
Affected (CPE criteria) 1
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
References 7
- http://www.securityfocus.com/bid/106671 Third Party Advisory
- https://security.gentoo.org/glsa/202006-04
- https://sourceware.org/bugzilla/show_bug.cgi?id=24097 Issue Tracking, Third Party Advisory
- http://www.securityfocus.com/bid/106671 Third Party Advisory
- https://security.gentoo.org/glsa/202006-04
- https://sourceware.org/bugzilla/show_bug.cgi?id=24097 Issue Tracking, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html