CVE-2023-41915: Debian Linux

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

Affected products

• Debian Debian Linux: version 10.0 only; version 12.0 only
• Fedoraproject Fedora: version 37 only; version 38 only; version 39 only
• Openpmix Openpmix: before 4.2.6 (fixed in 4.2.6); version 5.0.0 only

Published 2023-09-09. Last modified 2026-06-17.