Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2023-49936: Debian Slurm may crash and stop job scheduling
CVE-2023-49936 · published 2 years ago
Summary
Versions 22.05.x, 23.02.x, and 23.11.x of the Slurm workload manager on Debian can encounter a programming error that causes the service to stop working, halting job scheduling. This results in a denial of service where jobs cannot be submitted or run. Upgrade to version 22.05.11, 23.02.7, or 23.11.1 to resolve the issue.
What to do
- Update debian slurm-wlm to version 22.05.8-4+deb12u2.
- Update debian slurm-wlm to version 23.11.3-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | slurm-wlm |
< 22.05.8-4+deb12u2 Fix: upgrade to 22.05.8-4+deb12u2
|
| Debian:13 | debian | slurm-wlm |
< 23.11.3-1 Fix: upgrade to 23.11.3-1
|
| Debian:14 | debian | slurm-wlm |
< 23.11.3-1 Fix: upgrade to 23.11.3-1
|
| – | schedmd | slurm |
>= 22.05, < 22.05.12 >= 23.02, < 23.02.7 23.11 cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | slurm-llnl | All versions |
| Ubuntu:25.10 | canonical | slurm-wlm | All versions |
Original advisory text
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
References
- https://security-tracker.debian.org/tracker/CVE-2023-49936 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-49936 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-49936 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49936... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49936 Vendor Advisory
- https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html Third Party Advisory
- https://www.schedmd.com/security-archive.php Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]... URL
- https://lists.fedoraproject.org/archives/list/[email protected]... URL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
Severity
7.5
High
Type
CWE-476NULL Pointer Dereference
Timeline
Published14 Dec 2023
Updated4 Nov 2026
First seen15 Sep 2026
Sources
DEBIAN-CVE-2023-49936 · OSV
CVE-2023-49936 · NVD
UBUNTU-CVE-2023-49936 · OSV
CVE-2023-49936 · OSV
Track software like this
Free during beta