Live › vulnerability › CVE-2026-65108
NVIDIA Slurm's slurmstepd process has a heap-based buffer overflow that an attacker can control. Because slurmstepd runs with root permissions, a successful attack can give the attacker root-level control of the affected host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams that run NVIDIA Slurm for job scheduling on compute clusters, where slurmstepd runs as root on the nodes. The sources do not say which Slurm versions are affected or what conditions trigger the overflow.
No product ranges from the sources yet.
slurmd -V or sinfo --version (unknown if the sources name a specific check)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.
This page as .md · .json · in your agent: get_signal("CVE-2026-65108")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.