CUPS Vulnerability: Local Denial-of-Service Risk in Printing System
Summary
ALSA-2026:0596: Moderate: cups security update. Affects cups versions < 1:2.2.6-66.el8_10. Fixed in 1:2.2.6-66.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Common UNIX Printing System (CUPS) is a widely used printing layer for UNIX-like operating systems, including Linux. It facilitates the management of print jobs and printers, allowing users to print documents seamlessly. CUPS is known for its flexibility and support for various printer types, making it a critical component in many server and desktop environments. However, recent vulnerabilities have been identified that could potentially allow local users to disrupt printing services.
Vulnerability Detail
The vulnerabilities identified in CUPS include a local denial-of-service (DoS) attack via the cupsd.conf configuration file update and slow client communication that could lead to service disruption. Specifically, CVE-2025-61915 allows local users to manipulate the configuration file, potentially causing the CUPS daemon to crash. Additionally, CVE-2025-58436 highlights how slow communication from clients can overload the server, leading to a denial of service. These vulnerabilities can severely impact the availability of printing services, especially in environments where printing is essential.
How To Fix
Minimum fixed version
1:2.2.6-66.el8_10
This is the first release that contains the fix.
sudo dnf update cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the CUPS service by modifying the cupsd.conf file to limit which users can send print jobs. This can help mitigate the risk of local denial-of-service attacks until the package is updated.
Conclusion
In summary, the CUPS vulnerabilities pose a significant risk of local denial-of-service attacks that can disrupt printing services. It is crucial to update the affected packages to the patched version to ensure system security. Implementing temporary workarounds can help mitigate risks until updates are applied.
See every vulnerability recorded for cups →
FAQ
CUPS stands for Common UNIX Printing System, which is a modular printing system for UNIX-like operating systems.
The vulnerabilities can lead to local denial-of-service attacks, causing disruptions in printing services.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Consider implementing access restrictions in the cupsd.conf file as a temporary workaround to mitigate risks.
Detailed information can be found on the CVE pages for CVE-2025-58436 and CVE-2025-61915.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
