Critical severity9.8NVD Advisory· Published May 20, 2026· Updated May 21, 2026
CVE-2026-8631
CVE-2026-8631
Description
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Affected products
16- osv-coords14 versionspkg:rpm/almalinux/hplippkg:rpm/almalinux/hplip-commonpkg:rpm/almalinux/hplip-guipkg:rpm/almalinux/hplip-libspkg:rpm/almalinux/libsane-hpaiopkg:rpm/opensuse/hplip&distro=openSUSE%20Tumbleweedpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/hplip&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 3.18.4-13.el8_10.alma.1+ 13 more
- (no CPE)range: < 3.18.4-13.el8_10.alma.1
- (no CPE)range: < 3.18.4-13.el8_10.alma.1
- (no CPE)range: < 3.18.4-13.el8_10.alma.1
- (no CPE)range: < 3.18.4-13.el8_10.alma.1
- (no CPE)range: < 3.18.4-13.el8_10.alma.1
- (no CPE)range: < 3.26.4-1.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
- (no CPE)range: < 3.26.4-150400.3.22.1
Patches
Vulnerability mechanics
References
1- support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118nvdVendor Advisory
News mentions
1- ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New StoriesThe Hacker News · May 21, 2026