Heap-Based Buffer Overflow in NVIDIA Slurm Affects System Security
CVE-2026-65108

6.3MEDIUM

Key Information:

Vendor

Nvidia

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65108?

NVIDIA Slurm is susceptible to a vulnerability that enables an attacker to exploit a heap-based buffer overflow within the slurmstepd process. This issue arises when slurmstepd is executed with elevated root permissions, allowing malicious actors to potentially manipulate the memory stack, leading to arbitrary code execution or system compromise. Immediate measures are recommended for organizations utilizing affected versions of Slurm to mitigate risks associated with this vulnerability.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.