CVE-2022-29501

Description

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	slurm-wlm	21.08.8.2-1	—
Debian 13	slurm-wlm	21.08.8.2-1	—
Debian 12	slurm-wlm	21.08.8.2-1	—
Debian 11	slurm-wlm	20.11.7+really20.11.4-2+deb11u1	DSA-5166-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Pro 22.04 LTS	slurm-wlm	21.08.5-2ubuntu1+esm1	USN-6458-1
Ubuntu Pro 20.04 LTS	slurm-llnl	19.05.5-1ubuntu0.1~esm2	USN-6458-1
Ubuntu Pro 18.04 LTS	slurm-llnl	17.11.2-1ubuntu0.1~esm5	—

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 16.04 LTS	slurm-llnl	15.08.7-1ubuntu0.1~esm6	—
Ubuntu Pro 14.04 LTS	slurm-llnl	2.6.5-1ubuntu0.1~esm7	—

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP4	pdsh +1	2.34-150300.35.2	SUSE-RU-2022:4361-1
SLES 15 SP4	slurm_22_05	22.05.5-150300.7.3.2	SUSE-RU-2022:4361-1
SLES 15 SP3	pdsh +1	2.34-150300.35.2	SUSE-RU-2022:4361-1
SLES 15 SP3	slurm	20.11.9-150300.4.6.1	SUSE-SU-2022:1666-1
SLES 15 SP3	slurm_22_05	22.05.5-150300.7.3.2	SUSE-RU-2022:4361-1
SLES 12	pdsh	2.34-7.35.2	SUSE-RU-2022:4348-1
SLES 12	pdsh_slurm_18_08 +2	2.34-7.35.3	SUSE-RU-2022:4348-1
SLES 12	pdsh_slurm_22_05	2.34-7.35.5	SUSE-RU-2022:4348-1
SLES 12	slurm	17.02.11-6.53.1	SUSE-SU-2022:3497-1
SLES 12	slurm_18_08	18.08.9-3.17.1	SUSE-SU-2022:3454-1
SLES 12	slurm_20_02	20.02.7-3.14.1	SUSE-SU-2022:3477-1
SLES 12	slurm_20_11	20.11.9-3.11.1	SUSE-SU-2022:1726-1
SLES 12	slurm_22_05	22.05.5-3.3.5	SUSE-RU-2022:4348-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLE HPC 15 SP2	pdsh +1	2.34-150200.4.6.2	SUSE-RU-2022:4362-1
SLE HPC 15 SP2	slurm	20.02.7-150200.3.14.2	SUSE-SU-2022:3490-1
SLE HPC 15 SP2	slurm_20_11	20.11.9-150200.6.10.1	SUSE-SU-2022:1831-1
SLE HPC 15 SP2	slurm_22_05	22.05.5-150200.5.3.2	SUSE-RU-2022:4362-1
SLE HPC 15 SP1	pdsh +2	2.34-150100.10.14.1	SUSE-RU-2022:4297-1
SLE HPC 15 SP1	slurm	18.08.9-150100.3.22.1	SUSE-SU-2022:3468-1
SLE HPC 15 SP1	slurm_20_02	20.02.7-150100.3.24.1	SUSE-SU-2022:3491-1
SLE HPC 15 SP1	slurm_20_11	20.11.9-150100.3.14.1	SUSE-SU-2022:1815-1
SLE HPC 15 SP1	slurm_22_05	22.05.5-150100.3.3.1	SUSE-RU-2022:4297-1
SLE HPC 15	slurm	17.11.13-150000.6.40.1	SUSE-SU-2022:3535-1
SLE HPC 15	slurm_18_08	18.08.9-150000.1.17.1	SUSE-SU-2022:3462-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.4	pdsh +1	2.34-150300.35.2	SUSE-RU-2022:4361-1
openSUSE Leap 15.4	pdsh_slurm_20_02	2.34-150100.10.14.1	SUSE-RU-2022:4297-1
openSUSE Leap 15.4	pdsh_slurm_20_11	2.34-150200.4.6.2	SUSE-RU-2022:4362-1
openSUSE Leap 15.4	slurm	17.11.13-150000.6.40.1	SUSE-SU-2022:3535-1, SUSE-SU-2022:3490-1, SUSE-SU-2022:3468-1
openSUSE Leap 15.4	slurm_18_08	18.08.9-150000.1.17.1	SUSE-SU-2022:3462-1
openSUSE Leap 15.4	slurm_20_02	20.02.7-150100.3.24.1	SUSE-SU-2022:3491-1
openSUSE Leap 15.4	slurm_20_11	20.11.9-150200.6.10.1	SUSE-SU-2022:1831-1
openSUSE Leap 15.4	slurm_22_05	22.05.5-150300.7.3.2	SUSE-RU-2022:4361-1
openSUSE Leap 15.3	pdsh +1	2.34-150300.35.2	SUSE-RU-2022:4361-1
openSUSE Leap 15.3	pdsh_slurm_20_02	2.34-150100.10.14.1	SUSE-RU-2022:4297-1
openSUSE Leap 15.3	pdsh_slurm_20_11	2.34-150200.4.6.2	SUSE-RU-2022:4362-1
openSUSE Leap 15.3	slurm	17.11.13-150000.6.40.1	SUSE-SU-2022:3535-1, SUSE-SU-2022:3490-1, SUSE-SU-2022:3468-1
openSUSE Leap 15.3	slurm_18_08	18.08.9-150000.1.17.1	SUSE-SU-2022:3462-1
openSUSE Leap 15.3	slurm_20_02	20.02.7-150100.3.24.1	SUSE-SU-2022:3491-1
openSUSE Leap 15.3	slurm_20_11	20.11.9-150200.6.10.1	SUSE-SU-2022:1831-1
openSUSE Leap 15.3	slurm_22_05	22.05.5-150300.7.3.2	SUSE-RU-2022:4361-1

Advisories 18

USN-6458-1 slurm-llnl, slurm-wlm vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
DSA-5166-1 slurm-wlm - security update Debian Security (DSA / DLA) · Mar 9, 2026
SUSE-SU-2022:1815-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-RU-2022:4362-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3462-1 Security update for slurm_18_08 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3477-1 Security update for slurm_20_02 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-RU-2022:4297-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3497-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3490-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-RU-2022:4361-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3454-1 Security update for slurm_18_08 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3491-1 Security update for slurm_20_02 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1726-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-RU-2022:4348-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3468-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1831-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3535-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1666-1 Security update for slurm SUSE / openSUSE Security Updates · May 2, 2025

References

https://www.schedmd.com/news.php
https://lists.schedmd.com/pipermail/slurm-announce/
https://www.schedmd.com/news.php?id=260
FEDORA-2022-eeeff46680 vendor-advisory
FEDORA-2022-6d9d1862ee vendor-advisory
FEDORA-2022-916bb58e38 vendor-advisory
DSA-5166 vendor-advisory