VulnSocial

CVE-2026-38752Disclosure(busybox / busybox)

LOWCVSS 2.9 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch busybox busybox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

busybox CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-674CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • busybox

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-16); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
busybox
Products
busybox

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-16: 1Mentions · 2026-07-20: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-16: 1Technical Details · 2026-07-20: 107-1607-20
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-161
Disclosure1
2026-07-201
Patch1
Full discourse2 posts
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Red Hat Enterprise Linux 6 alert: CVE-2026-38752 (CVSS 6.5) Attackers could disrupt service or cause a denial of service. Apply the vendor-recommended mitigation. https://vulnipulse.com/advisories/linux-cve-2026-38752 #Linux #RedHatEnterpriseLinux6 #CyberSecurity #CVE

    Post summary

    Red Hat Enterprise Linux 6 has released a mitigation advisory for CVE‑2026‑38752, citing a potential denial‑of‑service vulnerability and urging users to apply the vendor‑recommended patches.

    0000033
    6 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-38752 Stack Overflow in BusyBox AWK Evaluate Function Causes Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-38752

    Post summary

    The text announces CVE-2026-38752, a stack overflow in BusyBox AWK’s Evaluate function that causes denial of service, with no information on PoC, exploit, patch, or active exploitation.

    00000122
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbusyboxbusybox2024-07-13--

Explore more

Back to dashboardbusybox CVEsbusybox vulnerabilities