NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file…

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• nvd.nist.gov/vuln/detail/CVE-2026-65107 Diğer
• cve.org/CVERecord Diğer

Kayıt geçmişi

1. 3 Kas 2026 18:20Yayımlandı

İlgili açıklar

• 7,0 CVE-2026-65168NVIDIA Slurm slurmstepd soket işleyicisinde heap tabanlı arabellek taşması
• 5,3 CVE-2026-65165NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --dis…
• 5,7 CVE-2026-65140NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD th…
• 6,3 CVE-2026-65139NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary…
• 6,3 CVE-2026-65138NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to…
• 4,7 CVE-2026-65109NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to r…