CVE-2026-16730

Name of the Vulnerable Software and Affected Versions dbus-broker (affected versions not specified)

Description A flaw exists where EMFILE/ENFILE errors, which occur when the process file-descriptor limit is reached during peer setup (specifically involving SO PEERPIDFD), are treated as fatal failures. This causes the broker to exit. A local attacker can trigger this condition by opening numerous connections to the user session bus, resulting in a denial of service for the desktop session. Flatpak applications can facilitate this by reaching the host session bus through the dbus proxy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.