Skip to content
OpenAdvisories
Unscored USN-6434-1 1 CVE

pmix vulnerability

Published Oct 17, 2023 · Updated Apr 27, 2026

Summary

Francois Diakhate discovered that PMIx did not properly handle race
conditions in the pmix library, which could lead to unwanted privilege
escalation. An attacker could possibly use this issue to obtain ownership
of an arbitrary file on the filesystem, under the default configuration
of the application.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS pmix 2.1.1~rc1-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS pmix 3.1.5-1ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS pmix 4.1.2-2ubuntu1+esm1

Vulnerabilities 1

References

  • report
    https://ubuntu.com/security/CVE-2023-41915