CVE-2026-44931 – malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

CVE ID :CVE-2026-44931

Published : May 13, 2026, 8:30 a.m. | 3 hours, 27 minutes ago

Description :The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in
malcontent-timerd allows arbitrary users in the system to slowly fill up disk space
in /var/lib/malcontent-timerd

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…