{"schemaVersion":3,"id":"USN-8197-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"slurm-llnl vulnerability\n\nIt was discovered that Slurm did not properly handle access control when\ndealing with RPC traffic through PMI2 and PMIx, which could allow an\nunprivileged user to send data to an arbitrary unix socket on the host.\nAn attacker could possibly use this issue to execute arbitrary code as\nthe root user.","dates":{"published":"2026-04-22T13:36:27.000Z","modified":"2026-06-25T13:32:32.066Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"slurm-llnl","name":"slurm-llnl","label":"slurm-llnl","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/slurm-llnl","purlType":"deb","versions":[{"text":"< 2.6.5-1ubuntu0.1~esm7","noFixRecorded":false,"fixedIn":null},{"text":"< 15.08.7-1ubuntu0.1~esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 17.11.2-1ubuntu0.1~esm5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.5-1ubuntu0.1~esm7 | < 15.08.7-1ubuntu0.1~esm6 | < 17.11.2-1ubuntu0.1~esm5","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8197-1","label":"ubuntu.com/security/notices/USN-8197-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-29501","label":"ubuntu.com/security/CVE-2022-29501","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2022-29501"]},"timeline":[{"kind":"published","date":"2026-04-22T13:36:27.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:32.066Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T07:52:30.144Z","stale":false,"partial":false}}