Schedmd Slurm vulnerabilities

• nvidia slurm NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket... CVE-2026-65168 Fix available 7.0 HighNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist... CVE-2026-65165 Fix available 5.3 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission... CVE-2026-65140 Fix available 5.7 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that... CVE-2026-65139 Fix available 6.3 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API... CVE-2026-65138 Fix available 6.3 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could... CVE-2026-65109 Fix available 4.7 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process... CVE-2026-65108 Fix available 6.3 MediumNovember 3, 2026
• nvidia slurm NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as... CVE-2026-65107 Fix available 6.3 MediumNovember 3, 2026
• schedmd slurm In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a... CVE-2025-43904 Fix available 4.2 MediumMay 26, 2025
• schedmd slurm SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in... CVE-2024-48936 Fix available 5.0 MediumOctober 28, 2024
• schedmd slurm An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control:... CVE-2023-49938 Fix available 8.2 HighDecember 14, 2023
• schedmd slurm An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,... CVE-2023-49937 Fix available 9.8 CriticalDecember 14, 2023
• schedmd slurm An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer... CVE-2023-49936 Fix available 7.5 HighDecember 14, 2023
• schedmd slurm An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control... CVE-2023-49935 Fix available 8.8 HighDecember 14, 2023
• schedmd slurm An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD... CVE-2023-49934 9.8 CriticalDecember 14, 2023
• schedmd slurm An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper... CVE-2023-49933 Fix available 7.5 HighDecember 14, 2023
• schedmd slurm, fedoraproject fedora +1 more SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race... CVE-2023-41914 Fix available 7.0 HighOctober 17, 2023
• schedmd slurm, debian linux, fedoraproject fedora +2 more SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information... CVE-2022-29500 Fix available 8.8 HighMay 5, 2022
• schedmd slurm, debian linux, fedoraproject fedora +2 more SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of... CVE-2022-29501 Fix available 8.8 HighMay 5, 2022
• schedmd slurm, fedoraproject fedora +1 more SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of... CVE-2022-29502 Fix available 9.8 CriticalMay 5, 2022
• schedmd slurm, fedoraproject fedora +1 more SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new... CVE-2021-43337 6.5 MediumNovember 17, 2021
• schedmd slurm, debian linux, fedoraproject fedora +2 more SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code... CVE-2021-31215 Fix available 8.8 HighMay 13, 2021
• schedmd slurm, debian linux +1 more Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized... CVE-2020-27746 Fix available 3.7 LowNovember 24, 2020
• schedmd slurm, debian linux +1 more Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin. CVE-2020-27745 Fix available 9.8 CriticalNovember 24, 2020
• schedmd slurm, debian linux, fedoraproject fedora +1 more +3 more Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message... CVE-2020-12693 Fix available 8.1 HighMay 21, 2020
• schedmd slurm, opensuse leap +1 more SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions. CVE-2019-19727 Fix available 5.5 MediumJanuary 13, 2020
• schedmd slurm, debian linux, opensuse leap +2 more SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges. CVE-2019-19728 Fix available 7.5 HighJanuary 13, 2020
• schedmd slurm, debian linux, fedoraproject fedora +1 more +3 more SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection. CVE-2019-12838 Fix available 9.8 CriticalJuly 11, 2019
• schedmd slurm, opensuse leap +1 more SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. CVE-2019-6438 Fix available 9.8 CriticalJanuary 31, 2019
• schedmd slurm, debian linux +1 more SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name... CVE-2018-10995 Fix available 5.3 MediumMay 30, 2018
• schedmd slurm, debian linux +1 more SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against... CVE-2018-7033 Fix available 9.8 CriticalMarch 15, 2018
• schedmd slurm Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before... CVE-2017-15566 Fix available 7.8 HighNovember 1, 2017
• schedmd slurm The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17... CVE-2016-10030 Fix available 8.1 HighJanuary 5, 2017