CVE catalog

CVE-2024-48936

slurm-wlm: CVE-2024-48936

Severity: Low
Published: Oct 28, 2024, 4:15:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.35% · Oct 25, 2026

SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with --stepmgr, or on systems that have globally enabled stepmgr via SlurmctldParameters=enable_stepmgr in their configuration.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	slurm-wlm	sid	`26.05.5-1`	fixed
Debian	slurm-wlm	forky	`26.05.5-1`	fixed
Debian	slurm-wlm	trixie	`24.11.5-4`	fixed
Debian	slurm-wlm	trixie-security	`24.11.5-4+deb13u1`	fixed
Debian	slurm-wlm	bookworm	`22.05.8-4+deb12u3`	not affected
Debian	slurm-wlm	bookworm-security	`22.05.8-4+deb12u3`	not affected
Suse	pdsh	linux enterprise module for hpc 12	`2.35-7.44.1`	fixed
Suse	pdsh_slurm_20_11	linux enterprise module for hpc 12	`2.35-7.44.1`	fixed
Suse	pdsh_slurm_22_05	linux enterprise module for hpc 12	`2.35-7.44.1`	fixed
Suse	pdsh_slurm_23_02	linux enterprise module for hpc 12	`2.35-7.44.1`	fixed
Suse	pdsh_slurm_24_11	linux enterprise module for hpc 12	`2.35-7.44.4`	fixed
Suse	slurm_24_11	linux enterprise module for hpc 12	`24.11.1-3.5.3`	fixed
Opensuse	slurm	tumbleweed	`24.05.4-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	slurm-wlm	source	sid	`24.05.4-1`	not yet assigned	Not reported	[1086003]
Debian	slurm-wlm	source	forky	`24.05.4-1`	not yet assigned	Not reported	[1086003]
Debian	slurm-wlm	source	trixie	`24.05.4-1`	not yet assigned	Not reported	[1086003]
Debian	slurm-wlm	source	bookworm	`Not affected`	unimportant	Not reported	[1086003]
Suse	pdsh	rpm	linux enterprise module for hpc 12	`2.35-7.44.1`	Not reported	SUSE-FU-2025:0661-1	Not reported
Suse	pdsh_slurm_20_11	rpm	linux enterprise module for hpc 12	`2.35-7.44.1`	Not reported	SUSE-FU-2025:0661-1	Not reported
Suse	pdsh_slurm_22_05	rpm	linux enterprise module for hpc 12	`2.35-7.44.1`	Not reported	SUSE-FU-2025:0661-1	Not reported
Suse	pdsh_slurm_23_02	rpm	linux enterprise module for hpc 12	`2.35-7.44.1`	Not reported	SUSE-FU-2025:0661-1	Not reported
Suse	pdsh_slurm_24_11	rpm	linux enterprise module for hpc 12	`2.35-7.44.4`	Not reported	SUSE-FU-2025:0661-1	Not reported
Suse	slurm_24_11	rpm	linux enterprise module for hpc 12	`24.11.1-3.5.3`	Not reported	SUSE-FU-2025:0661-1	Not reported
Opensuse	slurm	rpm	tumbleweed	`24.05.4-1.1`	Not reported	OPENSUSE-SU-2024:14450-1	Not reported

[Debian bug #1086003]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libnss_slurm2]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[libpmi0]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[libslurm44]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[perl-slurm]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-auth-none]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-config]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-config-man]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-cray]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-devel]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-doc]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-hdf5]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-lua]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-munge]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-node]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-openlava]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-pam_slurm]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-plugins]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-rest]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-seff]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed
[slurm-sjstat]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 24.05.4-1.1
  Version impact unknown
  dsa · slurm · opensuse · tumbleweed

Next results

Observed: Oct 27, 2026, 6:54:12 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]