{"id":"UBUNTU-CVE-2025-43904","details":"In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.","modified":"2026-05-07T13:43:15.379827Z","published":"2026-01-16T18:16:00Z","related":["USN-8236-1"],"upstream":["CVE-2025-43904"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-43904"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2025-43904"},{"type":"REPORT","url":"https://lists.schedmd.com/mailman3/hyperkitty/list/slurm-announce@lists.schedmd.com/message/B73QHKW6TKE2T5KDWVPIWNE5H4KWX667/"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8236-1"}],"affected":[{"package":{"name":"slurm-wlm","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/slurm-wlm@21.08.5-2ubuntu1+esm2?arch=source&distro=esm-apps/jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.08.5-2ubuntu1+esm2"}]}],"versions":["20.11.7+really20.11.4-2","21.08.5-1","21.08.5-1.1","21.08.5-2","21.08.5-2ubuntu1","21.08.5-2ubuntu1+esm1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"libpam-slurm","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libpam-slurm-adopt","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libpmi0","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libpmi2-0","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libslurm-perl","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libslurm37","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"libslurmdb-perl","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-client","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-client-emulator","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-wlm","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-wlm-basic-plugins","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-wlm-emulator","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurm-wlm-torque","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurmctld","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurmd","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurmdbd","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"slurmrestd","binary_version":"21.08.5-2ubuntu1+esm2"},{"binary_name":"sview","binary_version":"21.08.5-2ubuntu1+esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-43904.json"}},{"package":{"name":"slurm-wlm","ecosystem":"Ubuntu:Pro:24.04:LTS","purl":"pkg:deb/ubuntu/slurm-wlm@23.11.4-1.2ubuntu5+esm1?arch=source&distro=esm-apps/noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.11.4-1.2ubuntu5+esm1"}]}],"versions":["23.02.3-2ubuntu1","23.02.6-1ubuntu2","23.02.6-1ubuntu3","23.11.3-1ubuntu1","23.11.3-2ubuntu1","23.11.3-2ubuntu2","23.11.4-1.2ubuntu4","23.11.4-1.2ubuntu5"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"libpam-slurm","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"libpam-slurm-adopt","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"libpmi0t64","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"libpmi2-0t64","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"libslurm-perl"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"libslurm40t64"},{"binary_name":"libslurmdb-perl","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"sackd","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-client","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"slurm-client-emulator"},{"binary_name":"slurm-wlm","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-basic-plugins","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-elasticsearch-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"slurm-wlm-emulator"},{"binary_name":"slurm-wlm-hdf5-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"slurm-wlm-influxdb-plugin"},{"binary_name":"slurm-wlm-ipmi-plugins","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-jwt-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-kafka-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_version":"23.11.4-1.2ubuntu5+esm1","binary_name":"slurm-wlm-mysql-plugin"},{"binary_name":"slurm-wlm-plugins","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-rrd-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-rsmi-plugin","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurm-wlm-torque","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurmctld","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurmd","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurmdbd","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"slurmrestd","binary_version":"23.11.4-1.2ubuntu5+esm1"},{"binary_name":"sview","binary_version":"23.11.4-1.2ubuntu5+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-43904.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]}