Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-44931

malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

Description

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gnome malcontent

Default version status: unaffected

  • 0.14 to < unknownaffected

References