CVE-2021-31215: Debian Linux

High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days.

SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Schedmd Slurm: before 20.02.7 (fixed in 20.02.7); from 20.11, before 20.11.7 (fixed in 20.11.7)

Published 2021-05-13. Last modified 2026-06-17.