Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-120749 EUVD-2026-117967GHSA-r7wg-4x32-8p6v

Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

Published Nov 6, 2026 · Updated Nov 13, 2026 · Assigned by redhat

Description

A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesChanged cannot be delivered to a recipient (for example due to a deny rule or an exceeded outgoing message queue). Driver broadcasts still use serial 0; when delivery fails, composing the monitor error reply asserts reply_serial != 0 and aborts the daemon.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Hardened Images — —
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 dbus No fix yet —
Debian 13 dbus No fix yet —
Debian 12 dbus No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 dbus No fix yet —
Ubuntu 26.04 LTS dbus No fix yet —
Ubuntu 24.04 LTS dbus No fix yet —
Ubuntu 22.04 LTS dbus No fix yet —
Ubuntu 20.04 LTS dbus No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS dbus No fix yet —
Ubuntu Pro 16.04 LTS dbus No fix yet —
Ubuntu Pro 14.04 LTS dbus No fix yet —
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 dbus +8 1:1.16.2-7.1.hum1 RHSA-2026:97846

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 dbus +1 No fix yet —

Advisories 1

References