Gnome Malcontent vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Gnome Malcontent: 1 record(s), with affected versions and fixes.

CVE-2026-44931 Medium · 5.1 CWE-770 May 13, 2026

malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd