CVE-2026-38638 is a vulnerability in the with_argv function located in /unistd/mod.rs of relibc, a C library implementation for the Redox operating system. The flaw exists in a specific commit (61f42d) and allows attackers to trigger a Denial of Service (DoS) condition by supplying crafted input to the affected function. A proof-of-concept has been published on GitHub by researcher Marsman1996. The issue has been tracked and discussed in the Redox OS GitLab repository, and a merge request has been submitted to address the vulnerability. This affects systems or applications using the vulnerable version of relibc, particularly within the Redox OS ecosystem.
