redoxOS relibc Integer Overflow Vulnerability in Memory Syscall Handling

A denial-of-service vulnerability has been identified in redoxOS relibc versions prior to the latest commit. The issue arises from an integer overflow in the 'round_up_to_page_size' function within 'src/platform/redox/mod.rs'. This vulnerability allows local attackers to cause a panic by invoking memory-related system calls, such as 'munmap', with excessively large length parameters.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the system to panic and interrupt normal operations.

Reproduction

To reproduce this vulnerability, compile a program that calls the 'munmap' system call with a large length value, such as one that exceeds the maximum allowable size. When this program is executed, the 'round_up_to_page_size' function will overflow, causing a runtime panic.

Remediation

Users can update to the latest version of redoxOS relibc, where this vulnerability has been fixed.