UBUNTU-CVE-2026-65107: Medium severity ubuntu/slurm-wlm vulnerability

Published Nov 3, 2026

Updated

NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to.

Affected Software

4 affected components

ubuntu/slurm-wlm*

Event History

Nov 3, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The attacker needs local access and low-level privileges. Exploitation has high attack complexity and does not require user interaction.

What could a successful attack affect?

The CVSS vector indicates high impacts to confidentiality and integrity, with no indicated availability impact. The described outcome is writing a file to a path the user would not normally be permitted to access.

Which systems should be assessed?

Ubuntu systems using the slurm-wlm package should be assessed. The provided information does not identify affected package versions or whether a default configuration is affected.

UBUNTU-CVE-2026-65107: Medium severity ubuntu/slurm-wlm vulnerability

Affected Software

Event History

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What could a successful attack affect?

Which systems should be assessed?

Company

Resources

Contact

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What could a successful attack affect?

Which systems should be assessed?