Description
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | openSUSE Factory | slurm – < 22.05.2-3.3 | 22.05.2-3.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | pdsh +1 | 2.34-150300.35.2 | SUSE-RU-2022:4361-1 |
| SLES 15 SP4 | slurm_22_05 | 22.05.5-150300.7.3.2 | SUSE-RU-2022:4361-1 |
| SLES 15 SP3 | pdsh +1 | 2.34-150300.35.2 | SUSE-RU-2022:4361-1 |
| SLES 15 SP3 | slurm_22_05 | 22.05.5-150300.7.3.2 | SUSE-RU-2022:4361-1 |
| SLES 12 | pdsh | 2.34-7.35.2 | SUSE-RU-2022:4348-1 |
| SLES 12 | pdsh_slurm_18_08 +2 | 2.34-7.35.3 | SUSE-RU-2022:4348-1 |
| SLES 12 | pdsh_slurm_22_05 | 2.34-7.35.5 | SUSE-RU-2022:4348-1 |
| SLES 12 | slurm | 17.02.11-6.53.1 | SUSE-SU-2022:3497-1 |
| SLES 12 | slurm_18_08 | 18.08.9-3.17.1 | SUSE-SU-2022:3454-1 |
| SLES 12 | slurm_20_02 | 20.02.7-3.14.1 | SUSE-SU-2022:3477-1 |
| SLES 12 | slurm_22_05 | 22.05.5-3.3.5 | SUSE-RU-2022:4348-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE HPC 15 SP2 | pdsh +1 | 2.34-150200.4.6.2 | SUSE-RU-2022:4362-1 |
| SLE HPC 15 SP2 | slurm | 20.02.7-150200.3.14.2 | SUSE-SU-2022:3490-1 |
| SLE HPC 15 SP2 | slurm_22_05 | 22.05.5-150200.5.3.2 | SUSE-RU-2022:4362-1 |
| SLE HPC 15 SP1 | pdsh +2 | 2.34-150100.10.14.1 | SUSE-RU-2022:4297-1 |
| SLE HPC 15 SP1 | slurm | 18.08.9-150100.3.22.1 | SUSE-SU-2022:3468-1 |
| SLE HPC 15 SP1 | slurm_20_02 | 20.02.7-150100.3.24.1 | SUSE-SU-2022:3491-1 |
| SLE HPC 15 SP1 | slurm_22_05 | 22.05.5-150100.3.3.1 | SUSE-RU-2022:4297-1 |
| SLE HPC 15 | slurm | 17.11.13-150000.6.40.1 | SUSE-SU-2022:3535-1 |
| SLE HPC 15 | slurm_18_08 | 18.08.9-150000.1.17.1 | SUSE-SU-2022:3462-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | pdsh +1 | 2.34-150300.35.2 | SUSE-RU-2022:4361-1 |
| openSUSE Leap 15.4 | pdsh_slurm_20_02 | 2.34-150100.10.14.1 | SUSE-RU-2022:4297-1 |
| openSUSE Leap 15.4 | pdsh_slurm_20_11 | 2.34-150200.4.6.2 | SUSE-RU-2022:4362-1 |
| openSUSE Leap 15.4 | slurm | 17.11.13-150000.6.40.1 | SUSE-SU-2022:3535-1, SUSE-SU-2022:3490-1, SUSE-SU-2022:3468-1 |
| openSUSE Leap 15.4 | slurm_18_08 | 18.08.9-150000.1.17.1 | SUSE-SU-2022:3462-1 |
| openSUSE Leap 15.4 | slurm_20_02 | 20.02.7-150100.3.24.1 | SUSE-SU-2022:3491-1 |
| openSUSE Leap 15.4 | slurm_22_05 | 22.05.5-150300.7.3.2 | SUSE-RU-2022:4361-1 |
| openSUSE Leap 15.3 | pdsh +1 | 2.34-150300.35.2 | SUSE-RU-2022:4361-1 |
| openSUSE Leap 15.3 | pdsh_slurm_20_02 | 2.34-150100.10.14.1 | SUSE-RU-2022:4297-1 |
| openSUSE Leap 15.3 | pdsh_slurm_20_11 | 2.34-150200.4.6.2 | SUSE-RU-2022:4362-1 |
| openSUSE Leap 15.3 | slurm | 17.11.13-150000.6.40.1 | SUSE-SU-2022:3535-1, SUSE-SU-2022:3490-1, SUSE-SU-2022:3468-1 |
| openSUSE Leap 15.3 | slurm_18_08 | 18.08.9-150000.1.17.1 | SUSE-SU-2022:3462-1 |
| openSUSE Leap 15.3 | slurm_20_02 | 20.02.7-150100.3.24.1 | SUSE-SU-2022:3491-1 |
| openSUSE Leap 15.3 | slurm_22_05 | 22.05.5-150300.7.3.2 | SUSE-RU-2022:4361-1 |
Advisories 12
- SUSE-RU-2022:4362-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3462-1 Security update for slurm_18_08 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3477-1 Security update for slurm_20_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2022:4297-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3497-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3490-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2022:4361-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3454-1 Security update for slurm_18_08 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3491-1 Security update for slurm_20_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2022:4348-1 Recommended update for pdsh, slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3468-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3535-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026