crítica
CVE-2026-8631
HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), AlmaLinux (alta), Oracle (alta), Rocky Linux (alta), Ubuntu (media).
Descripción
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | hplip, hplip-common, hplip-gui y 2 más | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip, hplip-common, hplip-libs y 1 más | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip, hplip-common, hplip-gui y 2 más | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip, hplip-common, hplip-libs y 1 más | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip, hplip-common, hplip-libs y 1 más | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 y 1 más |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
Mostrar las 72 entradas de 27 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | hplip | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-common | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-gui | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-libs | 3.18.4-13.el8_10.alma.1 |
| alma 8 | libsane-hpaio | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-common | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-gui | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-libs | 3.18.4-13.el8_10 |
| Oracle Linux 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-common | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort fedora 43 | hplip | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-common | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-gui | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-libs | 3.26.4-2.fc43 |
| rapidfort fedora 43 | libsane-hpaio | 3.26.4-2.fc43 |
| rapidfort Oracle Linux 10 | hplip | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-common | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-libs | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | libsane-hpaio | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort ubuntu 20.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 22.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 24.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| Red Hat | hpijs | sin corrección indicada |
| Red Hat | hplip | sin corrección indicada |
| Red Hat | hplip-common | sin corrección indicada |
| Red Hat | hplip-gui | sin corrección indicada |
| Red Hat | hplip-libs | sin corrección indicada |
| Red Hat | libsane-hpaio | sin corrección indicada |
| rocky 10 | hplip | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-common | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-libs | 3.23.12-10.el10_2.4 |
| rocky 10 | libsane-hpaio | 3.23.12-10.el10_2.4 |
| rocky 8 | hplip | 3.18.4-13.el8_10 |
| rocky 8 | hplip-common | 3.18.4-13.el8_10 |
| rocky 8 | hplip-gui | 3.18.4-13.el8_10 |
| rocky 8 | hplip-libs | 3.18.4-13.el8_10 |
| rocky 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| rocky 9 | hplip | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-common | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| rocky 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| ubuntu 22.04 | hplip | 3.21.12+dfsg0-1ubuntu0.1 |
| ubuntu 24.04 | hplip | 3.23.12+dfsg0-0ubuntu5.1 |
| ubuntu 25.10 | hplip | 3.24.4+dfsg0-0ubuntu5.2 |
| ubuntu 26.04 | hplip | 3.24.4+dfsg0-0ubuntu8.1 |
Referencias
- https://access.redhat.com/errata/RHSA-2026:26228
- https://access.redhat.com/errata/RHSA-2026:26297
- https://access.redhat.com/errata/RHSA-2026:26335
- https://access.redhat.com/errata/RHSA-2026:48171
- https://access.redhat.com/errata/RHSA-2026:48586
- https://access.redhat.com/errata/RHSA-2026:48603
- https://access.redhat.com/errata/RHSA-2026:48606
- https://access.redhat.com/errata/RHSA-2026:48959
Las 27 referencias
- https://access.redhat.com/errata/RHSA-2026:48960
- https://access.redhat.com/errata/RHSA-2026:48961
- https://access.redhat.com/security/cve/CVE-2026-8631
- https://bugzilla.redhat.com/2480297
- https://bugzilla.redhat.com/2480300
- https://bugzilla.redhat.com/show_bug.cgi?id=2480297
- https://bugzilla.redhat.com/show_bug.cgi?id=2480300
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8631
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8632
- https://errata.almalinux.org/9/ALSA-2026-26297.html
- https://errata.rockylinux.org/RLSA-2026:26297
- https://linux.oracle.com/cve/CVE-2026-8631.html
- https://linux.oracle.com/errata/ELSA-2026-26335.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-8631
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8631.json
- https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118
- https://ubuntu.com/security/notices/USN-8483-1
- https://www.cve.org/CVERecord?id=CVE-2026-8631