Arbitrary User Disk Space Exhaustion in Malcontent Timer by Freedesktop
CVE-2026-44931

5.1MEDIUM

Key Information:

Vendor

Gnome
Status
Malcontent
Vendor
CVE Published:
13 May 2026

What is CVE-2026-44931?

The newly introduced RecordUsage D-Bus method in malcontent-timerd exposes a vulnerability that allows unauthorized users to gradually consume available disk space in the /var/lib/malcontent-timerd directory. This can lead to system performance degradation and operational issues, as affected systems may eventually run out of disk space, impacting both user experience and system functionality.

Affected Version(s)

malcontent 0.14

References

https://security.opensuse.org/2026/05/11/malcontent-disk-...
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44931

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthias Gerstner of SUSE
.