CVE-2026-128885 Dbus: stack out-of-bounds write in dbus _dbus_poll() select() fallback when file descriptor exceeds fd_setsize

A flaw was found in D-Bus. In configurations where the daemon falls back to using the Unix select mechanism for event monitoring, it does not verify whether file descriptor numbers exceed allocated limits. A local attacker can exploit this flaw by opening a large number of concurrent connections ...

CVE-2026-128885

A flaw exists in D-Bus where the daemon fails to verify if file descriptor numbers exceed allocated limits when falling back to the Unix select() mechanism for event monitoring. A local attacker can exploit this by opening a large number of concurrent connections, triggering an out-of-bounds writ...