UBUNTU-CVE-2026-120749
Dashboard / Vulnerabilities / UBUNTU-CVE-2026-120749
Summary:
Details: A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesChanged cannot be delivered to a recipient (for example due to a deny rule or an exceeded outgoing message queue). Driver broadcasts still use serial 0; when delivery fails, composing the monitor error reply asserts reply_serial != 0 and aborts the daemon. This is an incomplete fix for CVE-2023-34969, which only assigned serials for driver messages sent to a single recipient. On the well-known system bus this is a denial of service.
References: https://ubuntu.com/security/CVE-2026-120749, https://www.cve.org/CVERecord?id=CVE-2026-120749, https://access.redhat.com/security/cve/CVE-2026-120749, https://bugzilla.redhat.com/show_bug.cgi?id=2567978, https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/565, https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/592, https://gitlab.freedesktop.org/dbus/dbus/-/work_items/576
Affected packages
Package
Name: dbus
Purl: pkg:deb/ubuntu/dbus?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
Type: ECOSYSTEM
Events:
