Heap-Based Buffer Overflow in NVIDIA Slurm Affects System Security
CVE-2026-65108
6.3MEDIUM
What is CVE-2026-65108?
NVIDIA Slurm is susceptible to a vulnerability that enables an attacker to exploit a heap-based buffer overflow within the slurmstepd process. This issue arises when slurmstepd is executed with elevated root permissions, allowing malicious actors to potentially manipulate the memory stack, leading to arbitrary code execution or system compromise. Immediate measures are recommended for organizations utilizing affected versions of Slurm to mitigate risks associated with this vulnerability.
Affected Version(s)
Slurm 25.05.0 through 25.05.8
Slurm 25.11.0 through 25.11.7
Slurm 26.05.0 through 26.05.3