Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.3
CVE-2026-107886: CUPS printer class handling can crash service
CVE-2026-107886 · published 10 days ago
Summary
The CUPS printing system (versions before 2.4.20) may crash when a user with permission to change printer groups tries to edit or delete those groups. This can stop the printing service for all users. Apply the latest CUPS update or restrict class‑modifying rights to trusted administrators.
What to do
- Update bellsoft cups to version 2.4.20-r0.
- Update openprinting cups to version 2.4.20 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | openprinting | cups | < 2.4.20 |
| Debian:12 | debian | cups | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | cups | All versions |
| Alpaquita:23 | bellsoft | cups |
>= 2.4.2-r2, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:25 | bellsoft | cups |
>= 2.4.11-r1, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:stream | bellsoft | cups |
>= 2.4.2-r5, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
Original advisory text
BELL-CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges.
References
- https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-107886 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-1078... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107886 Vendor Advisory
- https://github.com/OpenPrinting/cups Product
- https://ubuntu.com/security/CVE-2026-107886 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-107886 Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-107886 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-415Double Free
Timeline
Published9 Oct 2026
Updated17 Oct 2026
First seen9 Oct 2026
Sources
CVE-2026-107886 · NVD
CVE-2026-107886 · MITRE
DEBIAN-CVE-2026-107886 · OSV
CVE-2026-107886 · OSV
GHSA-pwg4-pv39-8c22 · GHSA
UBUNTU-CVE-2026-107886 · OSV
BELL-CVE-2026-107886 · OSV
Track software like this
Free during beta