Description
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | slurm-wlm | 23.02.6-1 | — |
| Debian 13 | slurm-wlm | 23.02.6-1 | — |
| Debian 12 | slurm-wlm | 22.05.8-4+deb12u1 | DSA-5529-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | slurm-wlm | 23.11.4-1.2ubuntu5+esm1 | USN-8236-1 |
| Ubuntu Pro 22.04 LTS | slurm-wlm | 21.08.5-2ubuntu1+esm2 | USN-8236-1 |
| Ubuntu Pro 20.04 LTS | slurm-llnl | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | slurm-llnl | No fix yet | — |
| Ubuntu Pro 16.04 LTS | slurm-llnl | No fix yet | — |
| Ubuntu Pro 14.04 LTS | slurm-llnl | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | slurm | 20.11.9-150400.3.3.1 | SUSE-SU-2024:0314-1, SUSE-SU-2023:4578-1 |
| SLES 15 SP4 | slurm_22_05 | 22.05.10-150300.7.6.1 | SUSE-SU-2023:4579-1 |
| SLES 15 SP4 | slurm_23_02 | 23.02.6-150300.7.14.1 | SUSE-SU-2023:4566-1 |
| SLES 12 | slurm | 17.02.11-6.56.1 | SUSE-SU-2023:4120-1 |
| SLES 12 | slurm_18_08 | 18.08.9-3.20.1 | SUSE-SU-2024:0313-1, SUSE-SU-2023:4117-1 |
| SLES 12 | slurm_20_02 | 20.02.7-3.17.1 | SUSE-SU-2023:4119-1 |
| SLES 12 | slurm_20_11 | 20.11.9-3.16.1 | SUSE-SU-2024:0309-1, SUSE-SU-2023:4115-1 |
| SLES 12 | slurm_22_05 | 22.05.10-3.6.1 | SUSE-SU-2023:4582-1 |
| SLES 12 | slurm_23_02 | 23.02.6-3.13.1 | SUSE-SU-2023:4563-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE HPC 15 SP4 | slurm | 20.11.9-150400.3.3.1 | SUSE-SU-2024:0314-1 |
| SLE HPC 15 SP3 | slurm | 20.11.9-150300.4.9.1 | SUSE-SU-2024:0279-1, SUSE-SU-2023:4114-1 |
| SLE HPC 15 SP3 | slurm_22_05 | 22.05.10-150300.7.6.1 | SUSE-SU-2023:4579-1 |
| SLE HPC 15 SP3 | slurm_23_02 | 23.02.6-150300.7.14.1 | SUSE-SU-2023:4566-1 |
| SLE HPC 15 SP2 | slurm | 20.02.7-150200.3.17.1 | SUSE-SU-2023:4116-1 |
| SLE HPC 15 SP2 | slurm_20_11 | 20.11.9-150200.6.13.1 | SUSE-SU-2024:0288-1, SUSE-SU-2023:4329-1 |
| SLE HPC 15 SP2 | slurm_22_05 | 22.05.10-150200.5.6.1 | SUSE-SU-2023:4580-1 |
| SLE HPC 15 SP2 | slurm_23_02 | 23.02.6-150200.5.14.1 | SUSE-SU-2023:4565-1 |
| SLE HPC 15 SP1 | slurm | 18.08.9-150100.3.25.1 | SUSE-SU-2023:4121-1 |
| SLE HPC 15 SP1 | slurm_20_02 | 20.02.7-150100.3.27.1 | SUSE-SU-2023:4118-1 |
| SLE HPC 15 SP1 | slurm_20_11 | 20.11.9-150100.3.19.1 | SUSE-SU-2023:4113-1 |
| SLE HPC 15 SP1 | slurm_22_05 | 22.05.10-150100.3.6.1 | SUSE-SU-2023:4581-1 |
| SLE HPC 15 SP1 | slurm_23_02 | 23.02.6-150100.3.14.1 | SUSE-SU-2023:4564-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | slurm | 23.02.6-150500.5.12.1 | SUSE-SU-2023:4578-1 |
| openSUSE Leap 15.5 | slurm_20_11 | 20.11.9-150200.6.13.1 | SUSE-SU-2024:0288-1, SUSE-SU-2023:4329-1 |
| openSUSE Leap 15.5 | slurm_22_05 | 22.05.10-150300.7.6.1 | SUSE-SU-2023:4579-1 |
| openSUSE Leap 15.4 | slurm_20_11 | 20.11.9-150200.6.13.1 | SUSE-SU-2023:4329-1 |
| openSUSE Leap 15.4 | slurm_22_05 | 22.05.10-150300.7.6.1 | SUSE-SU-2023:4579-1 |
| openSUSE Leap 15.4 | slurm_23_02 | 23.02.6-150300.7.14.1 | SUSE-SU-2023:4566-1 |
Advisories 26
- USN-8236-1 slurm-wlm vulnerabilities Ubuntu Security Notices (USN) · May 8, 2026
- DSA-5529-1 slurm-wlm - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2023:4115-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4120-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4581-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4566-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4119-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0279-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4114-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4582-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4563-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4116-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4329-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4565-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0314-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4580-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0313-1 Security update for slurm_18_08 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0309-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4118-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4121-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4578-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4117-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4579-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:0288-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2023:4113-1 Security update for slurm SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2023:4564-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · May 2, 2025