CVE-2009-2084: Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supple...

Security readout for executives and security teams

This is an old local privilege-escalation issue in SLURM, a cluster job scheduler. On affected 1.2 and 1.3 releases before 1.3.14, local SLURM users might modify files and gain higher privileges because group permissions were not set correctly before running specific components. Exposure is likely limited to legacy Linux cluster or HPC environments still running SLURM 1.2 or 1.3 before 1.3.14. General servers without SLURM, or SLURM versions outside the cited affected range, are not shown affected by the provided sources. Treat as a targeted legacy-infrastructure issue. It is urgent for multi-user HPC clusters running affected SLURM versions because local users could gain privileges. If the organization does not operate old SLURM deployments, business urgency is low after inventory confirmation. Mitigation focus: Inventory systems running SLURM, especially legacy HPC or shared compute clusters.; Upgrade affected SLURM 1.2 or 1.3 deployments to version 1.3.14 or later.; Apply relevant Debian security updates where SLURM was installed from Debian packages..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.