CVE-2026-120749

Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesChanged cannot be delivered to a recipient (for example due to a deny rule or an exceeded outgoing message queue). Driver broadcasts still use serial 0; when delivery fails, composing the monitor error reply asserts…

6. Nov 2026

Ausgewertete Quellen

• Microsoft
  Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:97846
• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-120749
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2567978
• NVD
  CVE-2026-120749