Paper/Archive/CVE-2026-8631

CVE-2026-8631

HP Inc HP Linux Imaging and Printing Software — HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

Description · from the CVE record

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Affected

ProductAffectedFixed inSource
HP Linux Imaging and Printing Software< 3.26.43.26.4CNA
Red Hat Enterprise Linux 10see advisory0:3.23.12-10.el10_2.4redhat-SADP
Red Hat Enterprise Linux 10.0 Extended Update Supportsee advisory0:3.23.12-8.el10_0.2redhat-SADP
Red Hat Enterprise Linux 8see advisory0:3.18.4-13.el8_10redhat-SADP
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportsee advisory0:3.18.4-9.el8_4.1redhat-SADP
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onsee advisory0:3.18.4-9.el8_4.1redhat-SADP
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportsee advisory0:3.18.4-9.el8_6.1redhat-SADP
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onsee advisory0:3.18.4-9.el8_6.1redhat-SADP
Red Hat Enterprise Linux 8.8 Telecommunications Update Servicesee advisory0:3.18.4-9.el8_8.1redhat-SADP
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionssee advisory0:3.18.4-9.el8_8.1redhat-SADP
Red Hat Enterprise Linux 9see advisory0:3.21.2-6.el9_8.4redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionssee advisory0:3.21.2-6.el9_2.1redhat-SADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
hp (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118refaccess.redhat.com/security/cve/CVE-2026-8631refbugzilla.redhat.com/show_bug.cgi?id=2480300refsecurity.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8631.jsonadvisoryaccess.redhat.com/errata/RHSA-2026:48606advisoryaccess.redhat.com/errata/RHSA-2026:26228advisoryaccess.redhat.com/errata/RHSA-2026:26335advisoryaccess.redhat.com/errata/RHSA-2026:48960advisoryaccess.redhat.com/errata/RHSA-2026:48961advisoryaccess.redhat.com/errata/RHSA-2026:48959advisoryaccess.redhat.com/errata/RHSA-2026:48603advisoryaccess.redhat.com/errata/RHSA-2026:48586advisoryaccess.redhat.com/errata/RHSA-2026:48171advisoryaccess.redhat.com/errata/RHSA-2026:26297