Description
An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2026-08-28
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An issue in the with_argv function of the relibc library allows attackers to trigger a denial of service by supplying specially crafted input. The vulnerability arises because the function does not properly validate the arguments, causing unexpected termination or resource exhaustion. The impact is a loss of availability for the affected application.

Affected Systems

The flaw exists in the relibc component of the Redox operating system, specifically in commit 61f42d. Any version of Redox that includes this commit without the subsequent fix may be affected, regardless of vendor‑provided classification.

Risk and Exploitability

The EPSS score for this vulnerability is not available, and it is not listed in CISA’s KEV catalog, suggesting no publicly known exploits. The likely attack vector is through user input to applications that use relibc’s with_argv, and the vulnerability requires the attacker to provide crafted arguments. While the absence of an exploit probability score indicates low exploitation likelihood, the impact remains a critical availability failure if exploited.

Generated by OpenCVE AI on August 28, 2026 at 17:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade relibc to a version that incorporates the patch from merge request #989 (or later).
  • If an upgrade is not immediately possible, manually apply the patch changes from commit 61f42d to mitigate the input validation flaw.
  • Implement strict input validation or limit the number of arguments before passing them to with_argv to reduce the chance of overflow or corruption.

Generated by OpenCVE AI on August 28, 2026 at 17:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Crafted Input in relibc's with_argv Function
Weaknesses CWE-20

Fri, 28 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Redox-os
Redox-os relibc
Vendors & Products Redox-os
Redox-os relibc

Fri, 28 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-28T15:07:17.275Z

Reserved: 2026-04-06T00:00:00.000Z

Link: CVE-2026-38638

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T16:17:47.063

Modified: 2026-08-28T16:17:47.063

Link: CVE-2026-38638

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T17:45:04Z

Weaknesses
  • CWE-20

    Improper Input Validation