CVE-2023-49937: Schedmd Slurm

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

Affected products

• Schedmd Slurm: from 22.05, before 22.05.12 (fixed in 22.05.12); from 23.02, before 23.02.7 (fixed in 23.02.7); version 23.11 only

Published 2023-12-14. Last modified 2026-06-17.