Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2026-107885: CUPS print service can run out of job slots
CVE-2026-107885 · published 10 days ago
Summary
The printing system used on Debian, Ubuntu and BellSoft Linux servers may stop accepting new print jobs if a client leaves an incomplete print request open. This can fill the queue and cause legitimate print jobs to be rejected. Close any hanging print connections or restart the CUPS service to clear the queue, and consider configuring the system to limit how long incomplete requests are allowed.
What to do
- Update bellsoft cups to version 2.4.20-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | cups | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | cups | All versions |
| Alpaquita:23 | bellsoft | cups |
>= 2.4.2-r2, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:25 | bellsoft | cups |
>= 2.4.11-r1, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:stream | bellsoft | cups |
>= 2.4.2-r5, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
Original advisory text
BELL-CVE-2026-107885
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.
References
- https://github.com/OpenPrinting/cups/security/advisories/GHSA-hhw5-qqmc-p6rg Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-107885 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-1078... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107885 Vendor Advisory
- https://github.com/OpenPrinting/cups Product
- https://ubuntu.com/security/CVE-2026-107885 Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-107885 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-107885 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published9 Oct 2026
Updated17 Oct 2026
First seen9 Oct 2026
Sources
CVE-2026-107885 · NVD
DEBIAN-CVE-2026-107885 · OSV
CVE-2026-107885 · OSV
GHSA-hhw5-qqmc-p6rg · GHSA
UBUNTU-CVE-2026-107885 · OSV
BELL-CVE-2026-107885 · OSV
Track software like this
Free during beta