CUPS Vulnerability: Local Denial-of-Service Risk in Printing System
Summary
ALSA-2026:0312: Moderate: cups security update. Affects cups versions < 1:2.3.3op2-34.el9_7.2. Fixed in 1:2.3.3op2-34.el9_7.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Common UNIX Printing System (CUPS) is a widely used printing layer for UNIX-like operating systems, including Linux. It facilitates printing by managing print jobs and queues, providing a user-friendly interface for both users and administrators. CUPS is integral for applications that require printing capabilities, making it a critical component in many environments. However, vulnerabilities in CUPS can lead to significant security risks, including denial-of-service attacks that can disrupt printing services.
Vulnerability Detail
The vulnerability arises from two main issues: a local denial-of-service attack via updates to the cupsd.conf configuration file (CVE-2025-61915) and a potential denial-of-service attack due to slow client communication (CVE-2025-58436). These vulnerabilities can be exploited by local users to disrupt printing services, leading to service outages and impacting productivity. The technical aspects involve improper handling of configuration updates and inefficient communication protocols that can be manipulated to overload the system.
How To Fix
Minimum fixed version
1:2.3.3op2-34.el9_7.2
This is the first release that contains the fix.
sudo dnf update cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit access to the CUPS service by modifying the cupsd.conf file to restrict which users can send print jobs. This can help mitigate the risk of exploitation until the packages are updated.
Conclusion
The CUPS vulnerability poses a moderate risk of local denial-of-service attacks that can disrupt printing services. It is crucial to update the affected packages to the latest patched versions to mitigate these risks. Implementing temporary workarounds can also help protect systems until updates are applied.
See every vulnerability recorded for cups →
FAQ
CUPS stands for Common UNIX Printing System, a printing system for UNIX-like operating systems that allows a computer to act as a print server.
The vulnerabilities can lead to local denial-of-service attacks, causing disruptions in printing services and affecting productivity.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Consider implementing access restrictions in the cupsd.conf file as a temporary workaround to limit exposure to the vulnerability.
For detailed information, refer to the CVE pages: CVE-2025-58436 and CVE-2025-61915.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
