OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler (cupsd) when temporary printers are automatically deleted. cupsdDeleteTemporaryPrinters() in scheduler/printers.c calls cupsdDeletePrinter() without first expiring subscriptions that reference the printer, leaving cupsd_subscription_t.dest as a dangling pointer to freed heap memory. The dangling pointer is subsequently dereferenced at multiple code sites, causing a crash (denial of service) of the cupsd daemon. With heap grooming, this can be leveraged for code execution.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Apr 29, 2026 | Apr 7, 2026 |
| Amazon_linux_2023 | — | Upgrade cupsUpgrade cups-debugsourceUpgrade cups-lpd-debuginfoUpgrade cups-debuginfoUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-ipptool-debuginfoUpgrade cups-printerappUpgrade cups-lpdUpgrade cups-libs-debuginfoUpgrade cups-develUpgrade cups-printerapp-debuginfoUpgrade cups-client-debuginfo | May 4, 2026 | Apr 7, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 7, 2026 |
| Ubuntu | — | Upgrade cups-daemonUpgrade cups | Jun 9, 2026 | Jun 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub