GNOME malcontent vulnerabilities

Latest GNOME malcontent CVEs

Newest publication first

1. CVE-2026-44931 malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

   Published 2026-05-13

   Medium·CVSS 5.1 EPSS 0.15%

   The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.