USN-8197-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8197-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8197-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8197-1
Upstream
Related
Published
2026-04-22T13:36:27Z
Modified
2026-05-20T16:04:01.725294031Z
Summary
slurm-llnl vulnerability
Details

It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket on the host. An attacker could possibly use this issue to execute arbitrary code as the root user.

References

Affected packages

Ubuntu:Pro:14.04:LTS / slurm-llnl

Package

Name
slurm-llnl
Purl
pkg:deb/ubuntu/slurm-llnl?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.5-1ubuntu0.1~esm7

Affected versions

2.*
2.5.7-1
2.5.7-1build1
2.6.4-1ubuntu1
2.6.5-1
2.6.5-1ubuntu0.1~esm4
2.6.5-1ubuntu0.1~esm5
2.6.5-1ubuntu0.1~esm6

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libpam-slurm"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libpmi0"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libslurm-perl"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libslurm26"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libslurmdb-perl"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "libslurmdb26"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "slurm-llnl"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "slurm-llnl-basic-plugins"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "slurm-llnl-slurmdbd"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "slurm-llnl-sview"
        },
        {
            "binary_version": "2.6.5-1ubuntu0.1~esm7",
            "binary_name": "slurm-llnl-torque"
        }
    ]
}

Database specific

cves_map 
{
    "ecosystem": "Ubuntu:Pro:14.04:LTS",
    "cves": [
        {
            "id": "CVE-2022-29501",
            "severity": [
                {
                    "type": "CVSS_V3",
                    "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "type": "Ubuntu",
                    "score": "high"
                }
            ]
        }
    ]
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8197-1.json"

Ubuntu:Pro:16.04:LTS / slurm-llnl

Package

Name
slurm-llnl
Purl
pkg:deb/ubuntu/slurm-llnl?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.08.7-1ubuntu0.1~esm6

Affected versions

14.*
14.11.8-4
15.*
15.08.4-1build1
15.08.4-1build2
15.08.7-1
15.08.7-1build1
15.08.7-1ubuntu0.1~esm3
15.08.7-1ubuntu0.1~esm4
15.08.7-1ubuntu0.1~esm5

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libpam-slurm"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libpmi0"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libslurm-perl"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libslurm29"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libslurmdb-perl"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "libslurmdb29"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-client"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-client-emulator"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-llnl"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-llnl-slurmdbd"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-wlm"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-wlm-basic-plugins"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-wlm-emulator"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurm-wlm-torque"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurmctld"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurmd"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "slurmdbd"
        },
        {
            "binary_version": "15.08.7-1ubuntu0.1~esm6",
            "binary_name": "sview"
        }
    ]
}

Database specific

cves_map 
{
    "ecosystem": "Ubuntu:Pro:16.04:LTS",
    "cves": []
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8197-1.json"

Ubuntu:Pro:18.04:LTS / slurm-llnl

Package

Name
slurm-llnl
Purl
pkg:deb/ubuntu/slurm-llnl?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
17.11.2-1ubuntu0.1~esm5

Affected versions

17.*
17.02.6-1build1
17.02.9-1
17.11.2-1build1
17.11.2-1ubuntu0.1~esm3
17.11.2-1ubuntu0.1~esm4

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libpam-slurm"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libpmi0"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libpmi2-0"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libslurm-perl"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libslurm32"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libslurmdb-perl"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "libslurmdb32"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-client"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-client-emulator"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-wlm"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-wlm-basic-plugins"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-wlm-emulator"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurm-wlm-torque"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurmctld"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurmd"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "slurmdbd"
        },
        {
            "binary_version": "17.11.2-1ubuntu0.1~esm5",
            "binary_name": "sview"
        }
    ]
}

Database specific

cves_map 
{
    "ecosystem": "Ubuntu:Pro:18.04:LTS",
    "cves": [
        {
            "id": "CVE-2022-29501",
            "severity": [
                {
                    "type": "CVSS_V3",
                    "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "type": "Ubuntu",
                    "score": "high"
                }
            ]
        }
    ]
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8197-1.json"