Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2026-107890: CUPS printing service can crash and stop queues
CVE-2026-107890 · published 10 days ago
Summary
The CUPS printing system (used in many Linux distributions) can stop working if it receives a specially crafted print request. This causes the service to crash, halting all print jobs and requiring a restart. Update CUPS to the latest version or apply the vendor’s patch to prevent the crash.
What to do
- Update bellsoft cups to version 2.4.20-r0.
- Update openprinting cups to version 2.4.20 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | openprinting | cups | < 2.4.20 |
| Debian:12 | debian | cups | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | cups | All versions |
| Alpaquita:23 | bellsoft | cups |
>= 2.4.2-r2, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:25 | bellsoft | cups |
>= 2.4.11-r1, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
| Alpaquita:stream | bellsoft | cups |
>= 2.4.2-r5, < 2.4.20-r0 Fix: upgrade to 2.4.20-r0
|
Original advisory text
BELL-CVE-2026-107890
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.
References
- https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-107890 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-1078... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107890 Vendor Advisory
- https://github.com/OpenPrinting/cups Product
- https://ubuntu.com/security/CVE-2026-107890 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-107890 Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-107890 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-476NULL Pointer Dereference
Timeline
Published9 Oct 2026
Updated17 Oct 2026
First seen9 Oct 2026
Sources
CVE-2026-107890 · NVD
CVE-2026-107890 · MITRE
DEBIAN-CVE-2026-107890 · OSV
CVE-2026-107890 · OSV
GHSA-wjc4-qhjr-5m5x · GHSA
UBUNTU-CVE-2026-107890 · OSV
BELL-CVE-2026-107890 · OSV
Track software like this
Free during beta