The vulnerability CVE-2026-97399 involves a buffer over-read in the strncasecmp function of glibc versions >=2.24 and <2.45 when optimized for Power8 architecture. The function may read one byte beyond the input buffer size limit, potentially causing a program crash if the next memory page is inaccessible. This occurs when attacker-controlled input strings match exactly up to the edge of a memory page and the following page is not mapped or readable. The CVSS 3.1 base score is 3.7, indicating low severity, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and only availability impact (program crash). No known exploits are reported in the wild.

The impact is limited to a potential denial of service via program crash due to a buffer over-read beyond the input size limit in strncasecmp. There is no confidentiality or integrity impact reported. Exploitation requires specific memory layout conditions and attacker-controlled input strings. No known active exploitation has been observed.

No official patch or fix information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, applications using glibc on Power8 architecture should consider avoiding attacker-controlled inputs that could trigger this condition or apply other application-level mitigations to prevent crashes.