Description
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Hardened Images | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups | 2.4.20-1 | — |
| Debian 13 | cups | No fix yet | — |
| Debian 12 | cups | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | cups | No fix yet | — |
| Ubuntu 26.04 LTS | cups | No fix yet | — |
| Ubuntu 24.04 LTS | cups | No fix yet | — |
| Ubuntu 22.04 LTS | cups | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | cups | No fix yet | — |
| Ubuntu Pro 18.04 LTS | cups | No fix yet | — |
| Ubuntu Pro 16.04 LTS | cups | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | cups +7 | 2.4.19-4.4.hum1 | RHSA-2026:80679 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | cups +7 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cups | No fix yet | — |
Advisories 3
- ALAS2023-2026-3415 Moderate: cups security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 9, 2026
- WID-SEC-2026-2282 CUPS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 3, 2026
- RHSA-2026:80679 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 14, 2026
References
- RHSA-2026:80679 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-107655 vdb-entry
- RHBZ#2548399 issue-tracking
- https://github.com/OpenPrinting/cups/commit/12237ad
- https://github.com/OpenPrinting/cups/commit/25d6830
- https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78