Denial of Service in relibc via crafted shared library

Publication date: 2026-06-26

Last updated on: 2026-06-29

Assigner: MITRE

Description

An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted shared library.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-06-29

Generated

2026-07-17

AI Q&A

2026-06-27

EPSS Evaluated

2026-07-15

NVD

CVE-2026-38641

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-404	The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the DSO::mmap_and_copy function of relibc. It allows attackers to cause a Denial of Service (DoS) by loading a specially crafted shared library.

Impact Analysis

The impact of this vulnerability is a Denial of Service (DoS), which means that an attacker can cause the affected system or application to become unavailable or crash by loading a malicious shared library.

Hi! I’m here to help you understand CVE-2026-38641. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70