Critical Security Flaw in HPLIP Packages: Incomplete Fix for CVE-2026-8631
Summary
ALSA-2026:40831: Important: hplip security update. Affects hplip versions < 3.21.2-6.el9_8.5.alma.1. Fixed in 3.21.2-6.el9_8.5.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Hewlett-Packard Linux Imaging and Printing Project (HPLIP) provides essential drivers for Hewlett-Packard printers and multi-function peripherals on Linux systems. The hplip package is crucial for enabling seamless printing and scanning functionalities. However, recent vulnerabilities have raised concerns about the security of these packages, particularly in AlmaLinux 9, where they are widely used.
Vulnerability Detail
The vulnerability stems from an incomplete fix for CVE-2026-8631, which has been linked to CVE-2026-14544. This flaw could potentially allow unauthorized access or manipulation of printer functionalities, leading to data breaches or unauthorized printing activities. The security implications are significant, as they may expose sensitive information or disrupt normal operations.
How To Fix
Minimum fixed version
3.21.2-6.el9_8.5.alma.1
This is the first release that contains the fix.
sudo dnf update hplipTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the printer services or disable network printing until the packages are updated. This can help mitigate the risk of exploitation while waiting for the patch to be applied.
Conclusion
The recent security update for HPLIP packages addresses critical vulnerabilities that could compromise printer security. Users are strongly advised to update their packages to the latest version to mitigate risks. Additionally, temporary workarounds can be employed until the update is applied.
See every vulnerability recorded for hplip →
FAQ
CVE-2026-8631 is a security vulnerability in the HPLIP packages that could allow unauthorized access to printer functionalities.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider restricting access to printer services or disabling network printing as a temporary measure.
Failing to address this vulnerability may lead to unauthorized access, data breaches, or misuse of printer functionalities.
For more details, refer to the CVE pages linked in the advisory or visit the official HPLIP project page.
Related vulnerabilities
Recent vulnerabilities recorded for hplip.
