CVE-2026-44931: Gnome Malcontent

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd

Affected products

• Gnome Malcontent

Published 2026-05-13. Last modified 2026-06-17.