CVE-2026-38640: High severity relibc vulnerability

Published Jun 25, 2026

Updated

A reachable unwrap in the assertfail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string.

Affected Software

1 affected component

relibc

Event History

Jun 25, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to trigger the denial of service?

The CVSS vector indicates network access is sufficient, with low attack complexity and no required privileges or user interaction. The issue can be triggered using a crafted string.

What is the impact of successful exploitation?

Successful exploitation causes a denial of service. The CVSS vector reports no confidentiality or integrity impact and a high availability impact.

How can I identify potentially affected builds?

The affected code is identified as the __assert_fail function in /assert/mod.rs of relibc commit 61f42d. Compare the relibc source revision used by your build with that commit and review the referenced issue and merge request for remediation details.

CVE-2026-38640: High severity relibc vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to trigger the denial of service?

What is the impact of successful exploitation?

How can I identify potentially affected builds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to trigger the denial of service?

What is the impact of successful exploitation?

How can I identify potentially affected builds?