{"id":"CVE-2023-41914","aliases":["DEBIAN-CVE-2023-41914","DSA-5529-1","EUVD-2023-46392","GHSA-v8jm-8mp9-5962","SUSE-SU-2023:4113-1","SUSE-SU-2023:4114-1","SUSE-SU-2023:4115-1","SUSE-SU-2023:4116-1","SUSE-SU-2023:4117-1","SUSE-SU-2023:4118-1","SUSE-SU-2023:4119-1","SUSE-SU-2023:4120-1","SUSE-SU-2023:4121-1","SUSE-SU-2023:4329-1","SUSE-SU-2023:4563-1","SUSE-SU-2023:4564-1","SUSE-SU-2023:4565-1","SUSE-SU-2023:4566-1","SUSE-SU-2023:4578-1","SUSE-SU-2023:4579-1","SUSE-SU-2023:4580-1","SUSE-SU-2023:4581-1","SUSE-SU-2023:4582-1","SUSE-SU-2024:0279-1","SUSE-SU-2024:0288-1","SUSE-SU-2024:0309-1","SUSE-SU-2024:0313-1","SUSE-SU-2024:0314-1","UBUNTU-CVE-2023-41914","USN-8236-1","openSUSE-SU-2024:13330-1"],"status":"published","title":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00185,"percentile":0.08242,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2023-10-17T00:00:00Z","modified":"2026-10-28T02:30:46Z","fixes":[{"ecosystem":"Debian:12","package":"slurm-wlm","fixed_in":["22.05.8-4+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"slurm-wlm","fixed_in":["23.02.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"slurm-wlm","fixed_in":["23.02.6-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_20_11","fixed_in":["20.11.9-150100.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm","fixed_in":["20.11.9-150300.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm","fixed_in":["20.11.9-150300.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_20_11","fixed_in":["20.11.9-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm","fixed_in":["20.02.7-150200.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_18_08","fixed_in":["18.08.9-3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_20_02","fixed_in":["20.02.7-150100.3.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_20_02","fixed_in":["20.02.7-3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm","fixed_in":["17.02.11-6.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm","fixed_in":["18.08.9-150100.3.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_20_11","fixed_in":["20.11.9-150200.6.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"slurm_20_11","fixed_in":["20.11.9-150200.6.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"slurm_20_11","fixed_in":["20.11.9-150200.6.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_23_02","fixed_in":["23.02.6-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_23_02","fixed_in":["23.02.6-150100.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_23_02","fixed_in":["23.02.6-150200.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP4","package":"slurm_23_02","fixed_in":["23.02.6-150300.7.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm_23_02","fixed_in":["23.02.6-150300.7.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm_23_02","fixed_in":["23.02.6-150300.7.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"slurm_23_02","fixed_in":["23.02.6-150300.7.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"slurm","fixed_in":["23.02.6-150500.5.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"slurm","fixed_in":["23.02.6-150500.5.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"slurm","fixed_in":["23.02.6-150500.5.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP4","package":"slurm_22_05","fixed_in":["22.05.10-150300.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm_22_05","fixed_in":["22.05.10-150300.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm_22_05","fixed_in":["22.05.10-150300.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"slurm_22_05","fixed_in":["22.05.10-150300.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"slurm_22_05","fixed_in":["22.05.10-150300.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_22_05","fixed_in":["22.05.10-150200.5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_22_05","fixed_in":["22.05.10-150100.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_22_05","fixed_in":["22.05.10-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"slurm-wlm","fixed_in":["21.08.5-2ubuntu1+esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.8-4+deb12u1"}]}],"versions":["22.05.8-4"]},{"source":"osv","ecosystem":"Debian:13","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.8-4+deb12u1"}]}],"versions":["22.05.8-4"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150100.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150300.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150300.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.02.7-150200.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_18_08","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.08.9-3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_20_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.02.7-150100.3.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_20_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.02.7-3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.02.11-6.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.08.9-150100.3.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150200.6.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150200.6.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150200.6.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150100.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150200.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP4","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150300.7.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150300.7.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150300.7.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150300.7.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150500.5.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150500.5.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.6-150500.5.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP4","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150300.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150300.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150300.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150300.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150300.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150200.5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-150100.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_22_05","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.05.10-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150300.4.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150200.6.16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150200.6.16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_20_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-3.19.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_18_08","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.08.9-3.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150400.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150400.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.9-150400.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.7-1","2.5.7-1build1","2.6.4-1ubuntu1","2.6.5-1","2.6.5-1ubuntu0.1~esm4","2.6.5-1ubuntu0.1~esm5","2.6.5-1ubuntu0.1~esm6","2.6.5-1ubuntu0.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.11.8-4","15.08.4-1build1","15.08.4-1build2","15.08.7-1","15.08.7-1build1","15.08.7-1ubuntu0.1~esm3","15.08.7-1ubuntu0.1~esm4","15.08.7-1ubuntu0.1~esm5","15.08.7-1ubuntu0.1~esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.02.6-1build1","17.02.9-1","17.11.2-1build1","17.11.2-1ubuntu0.1~esm3","17.11.2-1ubuntu0.1~esm4","17.11.2-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.05.3.2-2","19.05.3.2-2build1","19.05.5-1","19.05.5-1ubuntu0.1~esm1","19.05.5-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.08.5-2ubuntu1+esm2"}]}],"versions":["20.11.7+really20.11.4-2","21.08.5-1","21.08.5-1.1","21.08.5-2","21.08.5-2ubuntu1","21.08.5-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.08.5-2ubuntu1+esm2"}]}],"versions":["20.11.7+really20.11.4-2","21.08.5-1","21.08.5-1.1","21.08.5-2","21.08.5-2ubuntu1","21.08.5-2ubuntu1+esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.11.4-1.2ubuntu5+esm1"}]}],"versions":["23.02.3-2ubuntu1","23.02.6-1ubuntu2","23.02.6-1ubuntu3","23.11.3-1ubuntu1","23.11.3-2ubuntu1","23.11.3-2ubuntu2","23.11.4-1.2ubuntu4","23.11.4-1.2ubuntu5"],"bundled":5}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"schedmd","product":"slurm"}],"references":[{"url":"https://schedmd.com/security.php","tags":["x_transferred","Product","web"]},{"url":"https://lists.schedmd.com/pipermail/slurm-announce/2023/000100.html","tags":["x_transferred","Mailing List","Vendor Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OWKTCYZT3DXEH66QXQJYB7NI7ONDRS4M/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41914","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OWKTCYZT3DXEH66QXQJYB7NI7ONDRS4M/"},{"url":"https://github.com/advisories/GHSA-v8jm-8mp9-5962"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41914.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-41914","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234113-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208810","tags":["report"]},{"url":"https://bugzilla.suse.com/1216207","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41914","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234114-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234115-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234116-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234117-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234118-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234119-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234120-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234121-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234329-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234563-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216869","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234564-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234565-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234566-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234578-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234579-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234580-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234582-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240279-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217711","tags":["report"]},{"url":"https://bugzilla.suse.com/1218046","tags":["report"]},{"url":"https://bugzilla.suse.com/1218050","tags":["report"]},{"url":"https://bugzilla.suse.com/1218051","tags":["report"]},{"url":"https://bugzilla.suse.com/1218053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49938","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240288-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240309-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240313-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240314-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-41914","tags":["report"]},{"url":"https://groups.google.com/g/slurm-users/c/N9WHFVefSHA","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41914","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8236-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43904","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-41914","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2024-09-05T14:46:17.149Z","updated_at":"2026-11-02T14:35:19.217111Z"}],"euvd":[{"id":"EUVD-2023-46392","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2024-09-05T14:46:17Z","updated_at":"2026-11-03T00:56:03.195853Z"}],"ghsa":[{"id":"GHSA-v8jm-8mp9-5962","title":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T06:36:30Z","modified":"2023-11-18T05:03:41Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:55:03.903531Z"}],"nvd":[{"id":"CVE-2023-41914","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T05:15:30Z","modified":"2026-06-17T06:23:03.697Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:08:41.047232Z"}],"osv":[{"id":"DEBIAN-CVE-2023-41914","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T05:15:30Z","modified":"2026-10-26T18:03:06.855158759Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"UBUNTU-CVE-2023-41914","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T05:15:00Z","modified":"2026-05-07T13:28:47.074307Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"CVE-2023-41914","description":"SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.","status":"published","published":"2023-11-03T00:00:00Z","modified":"2026-10-28T02:30:46.935556534Z","updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DSA-5529-1","title":"slurm-wlm - security update","status":"published","published":"2023-10-17T00:00:00Z","modified":"2026-03-09T02:08:46.97696Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:13330-1","title":"libnss_slurm2-23.02.6-1.1 on GA media","description":"These are all security issues fixed in the libnss_slurm2-23.02.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:45.741862Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:4113-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T11:41:10Z","modified":"2025-05-02T04:35:24.308912Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4114-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T11:41:50Z","modified":"2026-02-04T03:55:59.167691Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4115-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T13:13:40Z","modified":"2026-02-04T04:29:46.341029Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4116-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed several filesystem handling race conditions\n  that could lead to an attacker taking control of an arbitrary file\n  (bsc#1216207).\n\nNon-security fixes:\n\n- Fixed dependency issues that could arise during an upgrade (bsc#1208810).\n","status":"published","published":"2023-10-18T13:14:41Z","modified":"2026-02-04T03:38:16.231717Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4117-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T13:15:06Z","modified":"2026-02-04T02:15:59.900987Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4118-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T13:16:05Z","modified":"2026-02-04T02:46:06.224639Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4119-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T13:16:18Z","modified":"2026-02-04T04:08:00.233408Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4120-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T13:16:32Z","modified":"2026-02-04T04:28:34.775339Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4121-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-10-18T14:48:47Z","modified":"2026-02-04T02:17:07.131609Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4329-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. (bsc#1216207)\n","status":"published","published":"2023-11-01T04:33:45Z","modified":"2026-02-04T03:23:29.745622Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4563-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n","status":"published","published":"2023-11-24T16:13:10Z","modified":"2026-02-04T03:42:34.890539Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4564-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n","status":"published","published":"2023-11-24T16:13:26Z","modified":"2025-05-02T04:35:24.98315Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4565-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n","status":"published","published":"2023-11-24T16:13:46Z","modified":"2026-02-04T03:04:01.816367Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4566-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n","status":"published","published":"2023-11-24T16:14:14Z","modified":"2026-02-04T04:09:13.043509Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4578-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n","status":"published","published":"2023-11-27T08:30:35Z","modified":"2026-02-04T02:16:04.768218Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4579-1","title":"Security update for slurm_22_05","description":"This update for slurm_22_05 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).\n","status":"published","published":"2023-11-27T08:31:01Z","modified":"2025-05-02T04:35:25.232799Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4580-1","title":"Security update for slurm_22_05","description":"This update for slurm_22_05 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).\n\nBug fixes:\n\n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).\n- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).\n","status":"published","published":"2023-11-27T08:31:18Z","modified":"2026-02-04T02:58:39.395134Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4581-1","title":"Security update for slurm_22_05","description":"This update for slurm_22_05 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).      \n                                                                                               \nBug fixes:                                                                                     \n                                                                                                                                                                                               \n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).                                  \n- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).\n","status":"published","published":"2023-11-27T08:31:25Z","modified":"2026-02-04T04:19:12.91334Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4582-1","title":"Security update for slurm_22_05","description":"This update for slurm_22_05 fixes the following issues:\n\n- CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents (bsc#1216207).      \n                                                                                               \nBug fixes:                                                                                     \n                                                                                                                                                                                               \n- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).                                  \n- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts (bsc#1208810).\n","status":"published","published":"2023-11-27T08:31:35Z","modified":"2026-02-04T03:54:34.039199Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:0279-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207)\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-01-31T07:33:29Z","modified":"2026-02-04T03:59:54.831719Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0288-1","title":"Security update for slurm_20_11","description":"This update for slurm_20_11 fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207)\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-01-31T11:03:44Z","modified":"2025-05-02T04:35:25.538554Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0309-1","title":"Security update for slurm_20_11","description":"This update for slurm_20_11 fixes the following issues:\n\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-02-02T05:03:27Z","modified":"2026-02-04T02:48:00.430283Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0313-1","title":"Security update for slurm_18_08","description":"This update for slurm_18_08 fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207)\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Fix slurm upgrading to incompatible versions (bsc#1216869).    \n","status":"published","published":"2024-02-02T05:03:48Z","modified":"2026-02-04T02:51:53.582318Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0314-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file, or remove entire directories' contents. (bsc#1216207)\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-02-02T08:13:26Z","modified":"2026-02-04T03:02:51.834542Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-8236-1","title":"slurm-wlm vulnerabilities","description":"It was discovered that Slurm did not correctly handle certain file system\noperations. An attacker could possibly use this issue to modify files or\nleak sensitive information. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-41914)\n\nRyan Hall discovered that Slurm did not correctly enforce certain message\nintegrity checks. An attacker could possibly use this issue to bypass\nintegrity checks. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-49933)\n\nRyan Hall discovered that Slurm did not correctly handle certain memory\noperations. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2023-49937)\n\nRyan Hall discovered that Slurm did not correctly handle certain access\ncontrol mechanisms. An attacker could possibly use this issue to modify\nfiles or leak sensitive information. This issue only affected Ubuntu 22.04\nLTS. (CVE-2023-49938)\n\nIt was discovered that Slurm did not correctly handle user promotion. An\nattacker could possibly use this issue to promote themselves to an\nadministrator. (CVE-2025-43904)","status":"published","published":"2026-05-06T05:43:00Z","modified":"2026-05-08T12:33:13.607305049Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}