CVE-2026-16730

MEDIUM

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

Title source: cna

Description

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

References (3)

Core 3

Core References

Vdb Entry, X_Refsource_Redhat vdb-entry x_refsource_redhat

https://access.redhat.com/security/cve/CVE-2026-16730

https://github.com/bus1/dbus-broker/issues/435

Issue Tracking, X_Refsource_Redhat issue-tracking x_refsource_redhat

RHBZ#2506348

https://bugzilla.redhat.com/show_bug.cgi?id=2506348

Scores

CVSS v3 5.5

EPSS 0.0011

EPSS Percentile 1.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-755

Status published

Products (4)

Red Hat/Red Hat Enterprise Linux 10

Red Hat/Red Hat Enterprise Linux 9

Red Hat/Red Hat Hardened Images

Red Hat/Red Hat OpenShift Container Platform 4

Published Jul 24, 2026

Tracked Since Jul 24, 2026