The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
@ Maintainer(s): The vulnerability is fixed in >=sys-libs/glibc-2.25. Please bump the package and tell us if you plan to backport the fix.
this fix i had cherry picked into the first 2.24 patchset already
The fix already made it into Patchset 5 for glibc 2.23.
Author: Matthias Maier <email@example.com>
Date: Thu Jun 8 11:20:38 2017 -0500
profiles: Mask all glibc versions older than 2.23
This issue was resolved and addressed in
GLSA 201706-19 at https://security.gentoo.org/glsa/201706-19
by GLSA coordinator Thomas Deutschmann (whissi).