HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
Priority MEDIUM 52CWE-122Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 13 fixed, 1 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.
Summary
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01814 78th percentileScored 2026-11-07
Fix Partial HP Linux Imaging and Printing Software (HP Inc): 3.26.4Red Hat: 10 advisoriesRed Hat: 13 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hewlett Packard Enterprise | HP Linux Imaging and Printing Software | before 3.26.4 | 3.26.4 | Patch available | CNA |
- HP Linux Imaging and Printing Software VendorHewlett Packard Enterprise Affected before 3.26.4 Fixed in 3.26.4 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* | before 3.26.4 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* Versions before 3.26.4 Vulnerable ·Hewlett Packard Enterprise
Remediation
- Fix · CNA HP Linux Imaging and Printing Software (HP Inc) Fixed in 3.26.4
Red Hat 10 advisories
- RHSA-2026:48959 Released 2026-08-03 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) hplip-3.18.4-9.el8_8.1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) hplip-3.18.4-9.el8_8.1
- RHSA-2026:48960 Released 2026-08-03 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) hplip-3.18.4-9.el8_4.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) hplip-3.18.4-9.el8_4.1
- RHSA-2026:48961 Released 2026-08-03 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) hplip-3.18.4-9.el8_6.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) hplip-3.18.4-9.el8_6.1
Show 7 more Red Hat advisories
- RHSA-2026:48603 Released 2026-07-30 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) hplip-3.21.2-6.el9_2.1
- RHSA-2026:48586 Released 2026-07-30 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) hplip-3.21.2-6.el9_4.1
- RHSA-2026:48606 Released 2026-07-30 · Red Hat rating Importanthplip security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) hplip-3.23.12-8.el10_0.2
- RHSA-2026:48171 Released 2026-07-29 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) hplip-3.21.2-6.el9_6.1
- RHSA-2026:26335 Released 2026-06-16 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream (v. 8) hplip-3.18.4-13.el8_10
- RHSA-2026:26297 Released 2026-06-16 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream (v. 9) hplip-3.21.2-6.el9_8.4
- RHSA-2026:26228 Released 2026-06-16 · Red Hat rating Importanthplip security update
- Red Hat Enterprise Linux AppStream (v. 10) hplip-3.23.12-10.el10_2.4
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
HP Linux Imaging and Printing Software 3.26.4
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2026-07588 HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionPriority MEDIUM 46
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:26228 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:26335 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:26297 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:48960 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:48961 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:48959 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:48603 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:48586 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:48606 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:48171 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:48960 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:48961 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:48959 |
Not affected: 14 products
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Enterprise Linux AppStream (v. 8)
- Red Hat Enterprise Linux AppStream (v. 9)
- Red Hat Enterprise Linux AppStream AUS (v.8.4)
- Red Hat Enterprise Linux AppStream AUS (v.8.6)
- Red Hat Enterprise Linux AppStream E4S (v.8.8)
- Red Hat Enterprise Linux AppStream E4S (v.9.2)
- Red Hat Enterprise Linux AppStream E4S (v.9.4)
- Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- Red Hat Enterprise Linux AppStream EUS (v.9.6)
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
- Red Hat Enterprise Linux AppStream TUS (v.8.8)
Timeline
- 2026-10-02 Threatist record created from CVE-2026-8631
- 2026-10-03 Alias added: GHSA-hcc9-h975-pvc2
References
More Hewlett Packard Enterprise Linux Imaging And Printing vulnerabilities
- TI-2026-61890 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities CVSS 4.0CRITICAL 9.3
- TI-2026-61888 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities CVSS 4.0CRITICAL 9.3
- TI-2026-07588 HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution CVSS 4.0HIGH 8.5
- TI-2015-00780 The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for… CVSS 3.0HIGH 8.1
- TI-2026-61889 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities CVSS 4.0HIGH 8.6
- TI-2026-61882 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities CVSS 4.0HIGH 8.6
Sources
- CVE-2026-8631 · CVE Program
- CVE-2026-8631 · NVD
- FIRST EPSS
- GHSA-hcc9-h975-pvc2 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-8631 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences