Description
In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SchedMD | Slurm | < 23.11.11, 24 – < 24.05.8, 24.06 – < 24.11.5 | 23.11.11 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | slurm-wlm | 24.11.5-1 | — |
| Debian 13 | slurm-wlm | 24.11.5-1 | — |
| Debian 12 | slurm-wlm | 22.05.8-4+deb12u3 | DSA-5961-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | slurm-wlm | 23.11.4-1.2ubuntu5+esm1 | USN-8236-1 |
| Ubuntu Pro 22.04 LTS | slurm-wlm | 21.08.5-2ubuntu1+esm2 | USN-8236-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | slurm | 20.11.9-150400.3.6.2 | SUSE-SU-2025:02779-1, SUSE-SU-2025:01759-1, SUSE-SU-2025:01751-1 |
| SLES 15 SP7 | slurm_23_02 | 23.02.7-150300.7.20.1 | SUSE-SU-2025:01758-1 |
| SLES 15 SP6 | slurm | 20.11.9-150400.3.6.2 | SUSE-SU-2025:02779-1, SUSE-SU-2025:01759-1 |
| SLES 15 SP6 | slurm_24_11 | 24.11.5-150300.7.8.1 | SUSE-SU-2025:01761-1 |
| SLES 12 | slurm_20_11 | 20.11.9-3.22.1 | SUSE-SU-2025:01753-1 |
| SLES 12 | slurm_22_05 | 22.05.11-3.12.1 | SUSE-SU-2025:01755-1 |
| SLES 12 | slurm_23_02 | 23.02.7-3.19.1 | SUSE-SU-2025:01752-1 |
| SLES 12 | slurm_24_11 | 24.11.5-3.8.1 | SUSE-SU-2025:01757-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE HPC 15 SP5 | slurm | 23.02.7-150500.5.18.1 | SUSE-SU-2025:01759-1 |
| SLE HPC 15 SP5 | slurm_24_11 | 24.11.5-150300.7.8.1 | SUSE-SU-2025:01761-1 |
| SLE HPC 15 SP4 | slurm | 20.11.9-150400.3.6.2 | SUSE-SU-2025:02779-1 |
| SLE HPC 15 SP4 | slurm_22_05 | 22.05.11-150300.7.12.1 | SUSE-SU-2025:01756-1 |
| SLE HPC 15 SP4 | slurm_23_02 | 23.02.7-150300.7.20.1 | SUSE-SU-2025:01758-1 |
| SLE HPC 15 SP4 | slurm_24_11 | 24.11.5-150300.7.8.1 | SUSE-SU-2025:01761-1 |
| SLE HPC 15 SP3 | slurm | 20.11.9-150300.4.15.1 | SUSE-SU-2025:01760-1 |
| SLE HPC 15 SP3 | slurm_22_05 | 22.05.11-150300.7.12.1 | SUSE-SU-2025:01756-1 |
| SLE HPC 15 SP3 | slurm_23_02 | 23.02.7-150300.7.20.1 | SUSE-SU-2025:01758-1 |
| SLE HPC 15 SP3 | slurm_24_11 | 24.11.5-150300.7.8.1 | SUSE-SU-2025:01761-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | slurm | 24.11.5-1.1 | openSUSE-SU-2025:15165-1 |
| openSUSE Leap 15.6 | slurm | 23.02.7-150500.5.18.1 | SUSE-SU-2025:01759-1 |
| openSUSE Leap 15.6 | slurm_22_05 | 22.05.11-150300.7.12.1 | SUSE-SU-2025:01756-1 |
| openSUSE Leap 15.6 | slurm_23_02 | 23.02.7-150300.7.20.1 | SUSE-SU-2025:01758-1 |
| openSUSE Leap 15.6 | slurm_24_11 | 24.11.5-150300.7.8.1 | SUSE-SU-2025:01761-1 |
Advisories 14
- USN-8236-1 slurm-wlm vulnerabilities Ubuntu Security Notices (USN) · May 8, 2026
- openSUSE-SU-2025:15165-1 libnss_slurm2-24.11.5-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5961-1 slurm-wlm - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2025:01755-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01752-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01753-1 Security update for slurm_20_11 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01756-1 Security update for slurm_22_05 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02779-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01761-1 Security update for slurm_24_11 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01751-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01758-1 Security update for slurm_23_02 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01759-1 Security update for slurm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01757-1 Security update for slurm_24_11 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01760-1 Security update for slurm SUSE / openSUSE Security Updates · May 30, 2025