NULL pointer dereference in cups - CVE-2026-107890
Published: October 12, 2026
Vulnerability identifier: #VU154069
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-107890
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a null pointer dereference in cupsd job attribute processing when handling job submission requests containing repeated IPP group tags. A local user can submit a crafted Print-Job request to crash the scheduler and cause a denial of service.
The demonstrated exploitation requires an existing queue that accepts the supplied document format and is enabled to start printing. The crash interrupts service for all printers managed by the affected cupsd process.
Affected software
cups
How to mitigate CVE-2026-107890
Install security update from vendor's website.
cups - update to 2.4.20