Back Linuxsecurity

Oracle Linux 9 dbus-broker Moderate Session Bus DoS Fix ELSA-2026-61355

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

[28-9] - Fix session bus denial of service via EMFILE during peer setup. Resolves: RHEL-233014 [28-8] - Switch from useradd to systemd sysusers Resolves: RHEL-109036

dbus-broker-28-9.el9_8.x86_64.rpm

dbus-broker-28-9.el9_8.aarch64.rpm

Related CVEs: CVE-2026-16730

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 9 and 10 dbus-broker DoS Vulnerabilities Addressed Oracle has released patches for a moderate denial of service (DoS) vulnerability affecting the dbus-broker in both Oracle Linux 9 and 10. The vulnerability, identified as CVE-2026-16730, allows for a session bus DoS via EMFILE during peer setup. This affects users of Oracle Linux 9 and 10, specifically versions 28-9 and 36-5 of the dbus-broker package. The patches are crucial for maintaining system stability and security. Administrators are advised to apply the updates promptly to mitigate potential service disruptions. The vulnerability does not appear to be actively exploited at this time, but it is important to remain vigilant. Both advisories emphasize the importance of keeping systems up to date with the latest patches. 2 sources 46

Extracted Entities

Oracle Linux 9 dbus-broker Moderate Session Bus DoS Fix ELSA-2026-61355

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)