Back Linuxsecurity

Ubuntu 26.04 CUPS Critical Denial of Service and Access Flaws USN-8405

Linuxsecurity •LinuxSecurity Advisories • June 8, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in CUPS. Software Description: - cups: Common UNIX Printing System(tm) Details: Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use this issue to gain unauthorized access to restricted operations. (CVE-2026-27447) Asim Viladi Oglu Manizada discovered that CUPS incorrectly handled notify-recipient-uri values in the RSS notifier. A remote attacker could possibly use this issue to overwrite lp-writable files and cause a denial of service. (CVE-2026-34978) Jacob Newman discovered that CUPS incorrectly handled filter option strings when processing job attributes. An attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-34979) Asi...

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS cups 2.4.16-1ubuntu1.2 cups-daemon 2.4.16-1ubuntu1.2 Ubuntu 25.10 cups 2.4.12-0ubuntu3.9 cups-daemon 2.4.12-0ubuntu3.9 Ubuntu 24.04 LTS cups 2.4.7-1.2ubuntu7.13 cups-daemon 2.4.7-1.2ubuntu7.13 Ubuntu 22.04 LTS cups 2.4.1op1-1ubuntu4.20 cups-daemon 2.4.1op1-1ubuntu4.20 In general, a standard system update will make all the necessary changes.

CVE-2026-27447, CVE-2026-34978, CVE-2026-34979, CVE-2026-34980,

CVE-2026-34990, CVE-2026-39314, CVE-2026-39316, CVE-2026-41079

Ubuntu Security Notice USN-8405-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CUPS Vulnerabilities Affecting Multiple Ubuntu Releases Multiple vulnerabilities have been identified in the Common UNIX Printing System (CUPS) affecting several Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. Key vulnerabilities include unauthorized access through incorrect username handling (CVE-2026-27447) and denial of service attacks due to improper handling of job attributes (CVE-2026-34979). Remote attackers can exploit these issues to overwrite files and potentially execute arbitrary code. The vulnerabilities were discovered by various researchers, including Ariel Silver and Asim Viladi Oglu Manizada. Affected users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on April 3, 2026, and patches are available for all affected versions. 4 sources 73

Extracted Entities

Ubuntu 26.04 CUPS Critical Denial of Service and Access Flaws USN-8405

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (8)

Platforms (1)