OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.
CVE-2026-107885 is fixed in 15 products on 1 platform, first by ALAS2023-2026-3415, released November 10, 2026. It is not reported as exploited. Patch Radar priority: Routine.
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| cups · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-client · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-client-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-debugsource · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-devel · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-filesystem · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-ipptool · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-ipptool-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-libs · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-libs-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-lpd · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-lpd-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-printerapp · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
| cups-printerapp-debuginfo · amzn 2023 | 1:2.4.20-1.amzn2023.0.1 | ALAS2023-2026-3415 | Nov 10, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.