CVE-2023-41914: fedoraproject fedora Race Condition
CVSS: 7.0v3.1HighModified
AliasesSUSE-SU-2023:4113-1SUSE-SU-2023:4114-1SUSE-SU-2023:4115-1SUSE-SU-2023:4116-1SUSE-SU-2023:4117-1SUSE-SU-2023:4118-1SUSE-SU-2023:4119-1SUSE-SU-2023:4120-1SUSE-SU-2023:4121-1SUSE-SU-2023:4329-1SUSE-SU-2023:4563-1SUSE-SU-2023:4564-1SUSE-SU-2023:4565-1SUSE-SU-2023:4566-1SUSE-SU-2023:4578-1SUSE-SU-2023:4579-1SUSE-SU-2023:4580-1SUSE-SU-2023:4581-1SUSE-SU-2023:4582-1UBUNTU-CVE-2023-41914DEBIAN-CVE-2023-41914DSA-5529-1
Published 03-11-2023Last modified 05-09-2024
Vulnerability summary
CVE-2023-41914 is a high (CVSS 7.0) Race Condition vulnerability in fedoraproject fedora. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 9.9% of scored vulnerabilities.
CVSS score
7.0/10
010
High · v3.1 (NVD)EPSS score
0.21%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 03-11-2023PublishedVulnerability first disclosed.
- 05-09-2024Last modifiedVulnerability information updated.
Description
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.0Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
10%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 21-09-2026
21-09-202621-10-2026
EPSS score0.21%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse25 products
- slurm_18_08&distro=SUSE Linux Enterprise Module for HPC 12< 18.08.9-3.20.1
- slurm_20_02&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 20.02.7-150100.3.27.1
- slurm_20_02&distro=SUSE Linux Enterprise Module for HPC 12< 20.02.7-3.17.1
- slurm_20_11&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 20.11.9-150100.3.19.1
- slurm_20_11&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 20.11.9-150200.6.13.1
Opensuse6 products
- slurm_20_11&distro=openSUSE Leap 15.4< 20.11.9-150200.6.13.1
- slurm_20_11&distro=openSUSE Leap 15.5< 20.11.9-150200.6.13.1
- slurm_22_05&distro=openSUSE Leap 15.4< 22.05.10-150300.7.6.1
- slurm_22_05&distro=openSUSE Leap 15.5< 22.05.10-150300.7.6.1
- slurm_23_02&distro=openSUSE Leap 15.4< 23.02.6-150300.7.14.1
Ubuntu2 products
- slurm-llnlAll versions (No fix recorded)
- slurm-wlm< 21.08.5-2ubuntu1+esm2
Debian1 product
- slurm-wlm< 22.05.8-4+deb12u1 | < 23.02.6-1
Fedoraproject1 product
- fedoraEOL39
Schedmd1 product
- slurm≥ 22.05, < 22.05.10 | ≥ 23.02, < 23.02.6
6 vendors · 36 products
References
31 links- schedmd.com/security.phpProduct
