printf(3)'s %f format specifier wants a double.
There is no way to get printf to accept a float, only double or long double.
C's default argument promotions specify that calls to variadic functions like foo(char *fmt, ...) promote float to double, and perform the usual integer promotions of narrow integer types to int, for trailing args that match the ... part of the prototype.  (The same applies to all args for calling functions with no prototype.)  N1570 6.5.2.2 Function calls, subsections 6 and 7.
Thus C provides no way for a caller to pass a float to printf, so it has no conversion for it.  %f means double.  %lf also works for double in modern printf implementations, C99/C11 and C++11. You can safely use the same %lf format string with a double for printf and scanf.
Note that scanf is different.  float * and double * aren't affected by those promotions, so you can actually scan into a float with %f.
Load with CVTSS2SD .num(%rip), %xmm0
If you look at compiler output, you'll see gcc do everything you did.  It uses RIP-relative addressing for static storage as usual.
GCC also uses pxor to zero the register first to break the false dependency on the old value of %xmm0.  (cvtss2sd's poor design leaves the upper 64 bits of the destination unchanged.)  GCC errs on the side of caution, and inserts xor-zeroing instructions to break false dependencies in many cases.
You're probably getting 0 because the upper bits of xmm0 happen to be zero.  When printf looks at the low 64 bits of xmm0 as a double (IEEE binary64 on x86), it finds the bit pattern for 123.4f in the low 32 bits of the mantissa, and the rest zero.  As a 64-bit double, this bit-pattern represents a very small (subnormal) number, so it comes out as zero with %f.
You can try the equivalent with a float, (e.g. on http://www.h-schmidt.net/FloatConverter/IEEE754.html), setting some bits in the low half to see what you get.
If you used %g (scientific notation) or %a (hex representation of the double bit-pattern), the non-zero bits would show up.  (Unless maybe if you had Denormals Are Zero mode enabled in the MXCSR, although glibc might use purely integer stuff to pick apart FP bit-patterns when converting to base-10 strings; it's a hard problem.)