NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD th…

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• nvd.nist.gov/vuln/detail/CVE-2026-65140 Diğer
• cve.org/CVERecord Diğer

Kayıt geçmişi

1. 3 Kas 2026 18:36Yayımlandı

İlgili açıklar

• 7,0 CVE-2026-65168NVIDIA Slurm slurmstepd soket işleyicisinde heap tabanlı arabellek taşması
• 5,3 CVE-2026-65165NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --dis…
• 6,3 CVE-2026-65139NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary…
• 6,3 CVE-2026-65138NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to…
• 4,7 CVE-2026-65109NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to r…
• 6,3 CVE-2026-65108NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstep…