libcupsfilters: A flaw was found in libcupsfilters
CVE-2026-64611 is fixed in 5 products on 1 platform, first by RHSA-2026:56965, released June 14, 2026. It is not reported as exploited. Patch Radar priority: High.
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| cups-filters · opensuse-leap 16.0 | 1.28.17-bp160.2.1 | OPENSUSE-SU-2026:21850-1 | Sep 14, 2026 |
| cups-filters · sles 15.7 | 1.25.0-150200.3.31.1 | SUSE-SU-2026:3935-1 | Sep 3, 2026 |
| libcupsfilters · Fedora 43 | 1:2.1.1-9.fc43 | FEDORA-2026-1ED9130CEA | Aug 6, 2026 |
| libcupsfilters · RHEL 10 | 2.0.0-13.el10_2 | RHSA-2026:56965 | Jun 14, 2026 |
| libcupsfilters · almalinux 10 | 1:2.0.0-13.el10_2 | ALSA-2026:56965 | Aug 19, 2026 |
| libcupsfilters · ol 10 | 1:2.0.0-13.el10_2 | ELSA-2026-56965 | Aug 19, 2026 |
| libcupsfilters · opensuse-leap 16.0 | 2.1.1-160000.3.1 | OPENSUSE-SU-2026:21818-1 | Sep 9, 2026 |
| libcupsfilters · rocky 10 | 1:2.0.0-13.el10_2 | RLSA-2026:56965 | Aug 20, 2026 |
| libcupsfilters · sles 16.0 | 2.1.1-160000.3.1 | SUSE-SU-2026:23715-1 | Sep 9, 2026 |
| libcupsfilters-debuginfo · Fedora 43 | 1:2.1.1-9.fc43 | FEDORA-2026-1ED9130CEA | Aug 6, 2026 |
| libcupsfilters-debugsource · Fedora 43 | 1:2.1.1-9.fc43 | FEDORA-2026-1ED9130CEA | Aug 6, 2026 |
| libcupsfilters-devel · Fedora 43 | 1:2.1.1-9.fc43 | FEDORA-2026-1ED9130CEA | Aug 6, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.