CVE-2026-3904

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-3904
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-3904.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-3904
Downstream
Published
2026-03-11T13:19:09.741Z
Modified
2026-07-01T12:13:31.579833868Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on inputs that are concurrently modified by other processes or threads and crash.

The nscd client in the GNU C Library uses the memcmp function with inputs that may be concurrently modified by another thread, potentially resulting in spurious cache misses, which in itself is not a security issue.  However in the GNU C Library version 2.36 an optimized implementation of memcmp was introduced for x86_64 which could crash when invoked with such undefined behaviour, turning this into a potential crash of the nscd client and the application that uses it. This implementation was backported to the 2.35 branch, making the nscd client in that branch vulnerable as well.  Subsequently, the fix for this issue was backported to all vulnerable branches in the GNU C Library repository.

It is advised that distributions that may have cherry-picked the memcpy SSE2 optimization in their copy of the GNU C Library, also apply the fix to avoid the potential crash in the nscd client.

Database specific 
{
    "cna_assigner": "glibc",
    "cwe_ids": [
        "CWE-366"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3904.json"
}
References

Affected packages

Git / github.com/bminor/glibc

Affected ranges

Type
GIT
Repo
https://github.com/bminor/glibc
Events
Introduced
f94f6d8a3572840d3ba42ab9ace3ea522c99c0c2
Fixed
a704fd9a133bfb10510e18702f48a6a9c88dbbd5
Database specific 
{
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "2.35"
        },
        {
            "fixed": "2.37"
        }
    ],
    "cpe": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
}
Type
GIT
Repo
https://sourceware.org/git/glibc.git
Events
Introduced
f94f6d8a3572840d3ba42ab9ace3ea522c99c0c2
Fixed
a704fd9a133bfb10510e18702f48a6a9c88dbbd5
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "2.35"
        },
        {
            "fixed": "2.37"
        },
        {
            "introduced": "2.35"
        },
        {
            "fixed": "2.37"
        }
    ],
    "cpe": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
}

Affected versions

glibc-2.*
glibc-2.35
glibc-2.35.9000
glibc-2.36
glibc-2.36.9000

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-3904.json"