CVE-2026-3904
Severity
6.2MEDIUM
EPSS
0.0%
top 97.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 11
Latest updateMar 12
Description
Calling NSS-backed functions that support caching via nscd may call the
nscd client side code and in the GNU C Library version 2.36 under high
load on x86_64 systems, the client may call memcmp on inputs that are
concurrently modified by other processes or threads and crash.
The nscd client in the GNU C Library uses the memcmp function with
inputs that may be concurrently modified by another thread, potentially
resulting in spurious cache misses, which in itself is not a security
issue. Howeve…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.5 | Impact: 3.6
Affected Packages3 packages
Patches
🔴Vulnerability Details
4OSV
▶
CVEList▶
CVE-2026-3904: Calling NSS-backed functions that support caching via nscd may call the
nscd client side code and in the GNU C Library version 2↗2026-03-11
OSV▶
CVE-2026-3904: Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2↗2026-03-11
GHSA▶
GHSA-3584-5r39-4gm3: Calling NSS-backed functions that support caching via nscd may call the
nscd client side code and in the GNU C Library version 2↗2026-03-11