Skip to content
OpenAdvisories
Medium USN-8236-1 5 CVEs

slurm-wlm vulnerabilities

Published May 6, 2026 · Updated May 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Slurm did not correctly handle certain file system
operations. An attacker could possibly use this issue to modify files or
leak sensitive information. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-41914)

Ryan Hall discovered that Slurm did not correctly enforce certain message
integrity checks. An attacker could possibly use this issue to bypass
integrity checks. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-49933)

Ryan Hall discovered that Slurm did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. This issue only affected Ubuntu 22.04
LTS. (CVE-2023-49937)

Ryan Hall discovered that Slurm did not correctly handle certain access
control mechanisms. An attacker could possibly use this issue to modify
files or leak sensitive information. This issue only affected Ubuntu 22.04
LTS. (CVE-2023-49938)

It was discovered that Slurm did not correctly handle user promotion. An
attacker could possibly use this issue to promote themselves to an
administrator. (CVE-2025-43904)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS slurm-wlm 21.08.5-2ubuntu1+esm2
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS slurm-wlm 23.11.4-1.2ubuntu5+esm1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2023-41914
  • report
    https://ubuntu.com/security/CVE-2023-49933
  • report
    https://ubuntu.com/security/CVE-2023-49937
  • report
    https://ubuntu.com/security/CVE-2023-49938
  • report
    https://ubuntu.com/security/CVE-2025-43904