Print-Path RCE Exposed: Critical HP Linux Driver Flaws (CVE-2026-8631) Grant Root Privileges

A security advisory warns of multiple serious vulnerabilities in HP's HPLIP driver used by many enterprise Linux distributions—most notably CVE-2026-8631 (Critical, CVSS 9.3) an integer overflow in the hpcups print-path that can be triggered by specially crafted print data to achieve arbitrary code execution or privilege escalation, and CVE-2026-8632 (High, CVSS 8.5) which enables local privilege escalation via input validation failures; organizations are urged to audit endpoints, restrict access to printer service ports, and apply HP's updated drivers.