Moderate Security Update for dbus-broker: Session Bus Denial of Service Vulnerability
Summary
ALSA-2026:61340: Moderate: dbus-broker security update. Affects dbus-broker versions < 36-5.el10_2. Fixed in 36-5.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
dbus-broker is a high-performance message bus implementation adhering to the D-Bus specification, designed for Linux systems. It aims to provide reliability and compatibility with the D-Bus reference implementation while utilizing modern Linux kernel features. This package is crucial for inter-process communication on Linux, making it a vital component for various applications and services.
Vulnerability Detail
The vulnerability identified as CVE-2026-16730 affects dbus-broker, allowing a denial of service (DoS) condition during peer setup due to an EMFILE error. This can occur when the session bus is overwhelmed with too many open files, leading to service disruptions. The implications of this vulnerability can severely impact applications relying on dbus-broker for communication, potentially causing system instability and unavailability.
How To Fix
Minimum fixed version
36-5.el10_2
This is the first release that contains the fix.
sudo dnf update dbus-brokerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the security update as soon as it is available to mitigate the risk.
Conclusion
The dbus-broker vulnerability CVE-2026-16730 poses a moderate risk of denial of service, impacting the reliability of inter-process communication on Linux systems. It is crucial to update to the patched version to mitigate this risk effectively.
See every vulnerability recorded for dbus-broker →
FAQ
dbus-broker is a message bus implementation for Linux systems that facilitates communication between applications.
CVE-2026-16730 is a vulnerability in dbus-broker that can lead to a denial of service due to an EMFILE error during peer setup.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The risks include potential service disruptions and instability for applications relying on dbus-broker for inter-process communication.
It is advisable to regularly check for updates and apply them promptly to ensure your system remains secure against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for dbus-broker.
