The vulnerability CVE-2026-8631 affects HP Linux Imaging and Printing Software (HPLIP) and is classified as a heap-based buffer overflow (CWE-122) caused by an integer overflow (CWE-190) in the hpcups processing path. This integer overflow occurs when processing specially crafted print data, potentially leading to privilege escalation and arbitrary code execution. The issue is tracked with a CVSS 4.0 score of 9.3, reflecting critical impact with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. Red Hat has published security advisories and errata providing updates to fix this vulnerability in Red Hat Enterprise Linux 10 and related variants. The advisories include updated hplip packages that mitigate the issue.

Successful exploitation of this vulnerability can lead to privilege escalation and arbitrary code execution on affected systems running vulnerable versions of HPLIP. This could allow an attacker to gain unauthorized control over the system. The CVSS score of 9.3 indicates critical severity with high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.

Red Hat has released security updates for the hplip package in Red Hat Enterprise Linux 10 and its variants that address CVE-2026-8631. Applying these official vendor patches is the recommended remediation. Users should follow Red Hat's guidance for updating hplip packages as detailed in their security advisories (e.g., RHSA-2026:26228). Patch status is confirmed by the vendor advisories. No alternative mitigations or workarounds are specified.