CVE-2026-107885

A flaw was found in cups. An attacker with network access to the Internet Printing Protocol (IPP) service can cause a Denial of Service (DoS) by initiating a document submission request and keeping the connection open without completing it. The print scheduler globally pauses timeout processing for all jobs while any document transfer is active, preventing abandoned jobs from expiring. An attacker can repeatedly submit incomplete jobs until the system's job limit is reached, causing legitimate print requests to be rejected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.