Skip to content
OpenAdvisories
Unscored USN-8197-1 0 CVEs

slurm-llnl vulnerability

Published Apr 22, 2026 · Updated Jun 25, 2026

Summary

It was discovered that Slurm did not properly handle access control when
dealing with RPC traffic through PMI2 and PMIx, which could allow an
unprivileged user to send data to an arbitrary unix socket on the host.
An attacker could possibly use this issue to execute arbitrary code as
the root user.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS slurm-llnl 2.6.5-1ubuntu0.1~esm7
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS slurm-llnl 15.08.7-1ubuntu0.1~esm6
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS slurm-llnl 17.11.2-1ubuntu0.1~esm5

References

  • report
    https://ubuntu.com/security/CVE-2022-29501