CVE-2026-16730

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

A Moderate severity flaw in dbus-broker enables a local attacker or a Flatpak application within the same user session to induce a denial of service. This occurs when dbus-broker exhausts its file-descriptor table and exits instead of rejecting new connections, leading to a session bus crash and desktop disruption. Exploitation requires local access or a compromised application in the same user session.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.