Medium severity5.0NVD Advisory· Published Oct 28, 2024· Updated Jun 17, 2026

CVE-2024-48936

Description

SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with --stepmgr, or on systems that have globally enabled stepmgr via SlurmctldParameters=enable_stepmgr in their configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Schedmd/Slurmcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <24.05.4
osv-coords37 versions
pkg:rpm/opensuse/pdsh&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/pdsh_slurm_22_05&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/pdsh_slurm_23_02&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/pdsh_slurm_24_11&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/slurm_24_11&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/slurm&distro=openSUSE%20Tumbleweed pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP6 pkg:rpm/suse/pdsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6 pkg:rpm/suse/pdsh_slurm_20_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/pdsh_slurm_22_05&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/pdsh_slurm_22_05&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/pdsh_slurm_22_05&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/pdsh_slurm_22_05&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/pdsh_slurm_23_02&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/pdsh_slurm_23_02&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/pdsh_slurm_23_02&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/pdsh_slurm_23_02&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/pdsh_slurm_24_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP6 pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012 pkg:rpm/suse/slurm_24_11&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP6
< 2.35-150500.46.6.3+ 36 more
- (no CPE)range: < 2.35-150500.46.6.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150500.46.6.2
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.05.4-1.1
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150500.46.6.3
- (no CPE)range: < 2.35-150500.46.6.3
- (no CPE)range: < 2.35-7.44.1
- (no CPE)range: < 2.35-150500.46.6.3
- (no CPE)range: < 2.35-150500.46.6.3
- (no CPE)range: < 2.35-7.44.1
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-7.44.1
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-150300.54.3
- (no CPE)range: < 2.35-7.44.1
- (no CPE)range: < 2.35-150300.54.2
- (no CPE)range: < 2.35-150300.54.2
- (no CPE)range: < 2.35-150300.54.2
- (no CPE)range: < 2.35-150500.46.6.2
- (no CPE)range: < 2.35-150500.46.6.2
- (no CPE)range: < 2.35-7.44.4
- (no CPE)range: < 2.35-150500.46.6.2
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.11.1-150300.7.5.1
- (no CPE)range: < 24.11.1-3.5.3
- (no CPE)range: < 24.11.1-150300.7.5.1

Patches

Vulnerability mechanics

References

lists.schedmd.com/mailman3/hyperkitty/list/slurm-announce%40lists.schedmd.com/message/44MFMN7R35YZFWTNO43R2754W5B5XUAI/nvdMailing List
lists.schedmd.com/pipermail/slurm-announce/2024/date.htmlnvdMailing List
www.schedmd.com/security-policy/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000