The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:9877 https://access.redhat.com/errata/RHSA-2025:9877
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2025:11066 https://access.redhat.com/errata/RHSA-2025:11066
This comment was flagged as spam, view the edit history to see the original text if required.