CVE-2026-16730CWE-755

CVE-2026-16730

Medium · published July 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2026-07-24T16:16Z
References (6)
https://access.redhat.com/errata/RHSA-2026:61340 · [email protected]https://access.redhat.com/errata/RHSA-2026:61355 · [email protected]https://access.redhat.com/errata/RHSA-2026:66018 · [email protected]https://access.redhat.com/security/cve/CVE-2026-16730 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2506348 · [email protected]https://github.com/bus1/dbus-broker/issues/435 · [email protected]
EPSS history
Timeline
  • 24 JUL 11:26Z
    Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup
    cvelistv5