CVE-2026-44931: malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

Severity: medium (CVSS 5.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-13 · updated 2026-10-26
Weakness: CWE-770

Description

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd

Affected products

gnome malcontent: from 0.14

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44931
https://security.opensuse.org/2026/05/11/malcontent-disk-space-dos.html
http://www.openwall.com/lists/oss-security/2026/05/11/1

Get alerted when CVE-2026-44931 or the next vulnerability affects your stack