CVE-2026-38637

EPSS 0.4%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2026-38637 https://gitlab.redox-os.org/redox-os/relibc/-/issues/264 https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/987 https://gitlab.redox-os.org/redox-os/relibc/-/work_items/264