PT-2026-64278 · Red Hat · Red Hat Enterprise Linux 10+3

CVE-2026-16730 · Publicado 2026-07-24 · Atualizado 2026-07-24

Mitre

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2026-16730

Produtos afetados

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 9

Red Hat Hardened Images

Red Hat Openshift Container Platform 4

Referências · 4

• https://github.com/bus1/dbus-broker/issues/435 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2506348 · Nota
• https://access.redhat.com/security/cve/CVE-2026-16730 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16730 · Nota de Segurança