Alerts This Week
Warning Icon 1 1,109
Alerts This Week
Warning Icon 1 1,109

Ubuntu 22.04 Slurm Critical Access Control Denial of Service USN-8236-1

ubuntu
Calendar Grey May 7, 2026
Dist Ubuntu Esm H88
Multiple security issues in Slurm were fixed for Ubuntu 22.04 and 24.04 releases, exposing file manipulation risks.
Several security issues were fixed in Slurm.

Summary

Several security issues were fixed in Slurm.

Software Description:

- slurm-wlm: Simple Linux Utility for Resource Management

Details:

It was discovered that Slurm did not correctly handle certain file system

operations. An attacker could possibly use this issue to modify files or

leak sensitive information. This issue only affected Ubuntu 22.04 LTS.

(CVE-2023-41914)

Ryan Hall discovered that Slurm did not correctly enforce certain message

integrity checks. An attacker could possibly use this issue to bypass

integrity checks. This issue only affected Ubuntu 22.04 LTS.

(CVE-2023-49933)

Ryan Hall discovered that Slurm did not correctly handle certain memory

operations. An attacker could possibly use this issue to cause a denial of

service or execute arbitrary code. This issue only affected Ubuntu 22.04

LTS. (CVE-2023-49937)

Ryan Hall discovered that Slurm did not correctly handle certain access

control mechanisms. An attacker could possibly use this issue to modify

files or leak...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Ubuntu slurm-wlm","access control

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libpam-slurm                    23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro
  libpam-slurm-dev                23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro
  libslurm-dev                    23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro
  slurm-wlm                       23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro
  slurmctld                       23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro
  slurmd                          23.11.4-1.2ubuntu5+esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  libpam-slurm                    21.08.5-2ubuntu1+esm2
                                  Available with Ubuntu Pro
  libslurm-dev                    21.08.5-2ubuntu1+esm2
                                  Available with Ubuntu Pro
  slurm-wlm                       21.08.5-2ubuntu1+esm2
                                  Available with Ubuntu Pro
  slurmctld                       21.08.5-2ubuntu1+esm2
                                  Available with Ubuntu Pro
  slurmd                          21.08.5-2ubuntu1+esm2
                                  Available with Ubuntu Pro

After a standard system update you need to restart Slurm to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-8236-1

CVE-2023-41914, CVE-2023-49933, CVE-2023-49937, CVE-2023-49938,

CVE-2025-43904

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8236-1

Topics%20covered

Topics Covered

security advisory Ubuntu slurm-wlm","access control

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here