Moderate Vulnerability in dbus-broker: Session Bus Denial of Service Risk
Summary
RLSA-2026:61355: Moderate: dbus-broker security update. Affects dbus-broker versions < 0:28-9.el9_8. Fixed in 0:28-9.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
dbus-broker is a high-performance message bus implementation based on the D-Bus specification, designed exclusively for Linux systems. It aims to provide reliability and compatibility with the D-Bus reference implementation while leveraging modern Linux kernel features. This package is crucial for inter-process communication in Linux environments.
Vulnerability Detail
The vulnerability identified as CVE-2026-16730 in dbus-broker allows for a denial of service (DoS) condition during peer setup due to the EMFILE error. This can occur when the maximum number of file descriptors is reached, preventing new connections from being established. The impact of this vulnerability could lead to service interruptions, affecting applications that rely on dbus-broker for communication. The CVSS score for this vulnerability is 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
0:28-9.el9_8
This is the first release that contains the fix.
sudo dnf update dbus-brokerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can monitor the number of open file descriptors and adjust the system limits to prevent reaching the EMFILE state. This can be done by modifying the limits in the '/etc/security/limits.conf' file, for example: '* soft nofile 1024' and '* hard nofile 2048'.
Conclusion
The dbus-broker package has a moderate vulnerability that can lead to a denial of service condition. It is essential to update to the patched version to mitigate this risk. Additionally, temporary workarounds can be implemented to manage the number of open file descriptors.
See every vulnerability recorded for dbus-broker →
FAQ
dbus-broker is a message bus implementation that facilitates communication between processes in Linux systems.
CVE-2026-16730 refers to a specific vulnerability in dbus-broker that can lead to a denial of service condition.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of this vulnerability is 5.5, indicating a moderate level of severity.
You can update the dbus-broker package by running 'sudo dnf update dbus-broker' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for dbus-broker.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
