Medium severity · published May 13, 2026
CVE-2026-44931
malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in
malcontent-timerd allows arbitrary users in the system to slowly fill up disk space
in /var/lib/malcontent-timerd
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
malcontent · gnome
0.14 before unknown · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44931
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44931
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44931
security.opensuse.org
https://security.opensuse.org/2026/05/11/malcontent-disk-space-dos.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2026/05/11/1