CVE-2023-41914: SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or…

PriorityP432high7CVSS 3.1

AVLACHPRLUINSUCHIHAH

EPSS

0.20%

9.6th percentile

SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	slurm-wlm	< slurm-wlm 22.05.8-4+deb12u1 (bookworm)	slurm-wlm 22.05.8-4+deb12u1 (bookworm)
fedoraproject	fedora	—	—
schedmd	slurm	>= 22.05 < 22.05.10	22.05.10
schedmd	slurm	>= 23.02 < 23.02.6	23.02.6

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

osv7.0HIGH

vendor_debian7.0HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.