
CVE-2026-44931: malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API https://www.openwall.com/lists/oss-security/2026/05/11/1 Parental control system for GNOME. In 0.14.0 a D-Bus method was added which allows arbitrary users in the system to fill up the disk.
Post summary
A disk‑space exhaustion flaw exists in GNOME’s parental control (v0.14.0) through a globally accessible D-Bus API, allowing any system user to fill the disk.

