CVE-2026-65138

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65138", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2026-07-21T17:16:49.701Z", "datePublished": "2026-11-03T15:34:12.469Z", "dateUpdated": "2026-11-03T18:27:14.810Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-11-03T15:34:12.469Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Escalation of privileges"}, {"lang": "en", "value": "Information disclosure"}]}], "affected": [{"vendor": "NVIDIA", "product": "Slurm", "versions": [{"status": "affected", "version": "25.05.0 through 25.05.8"}, {"status": "affected", "version": "25.11.0 through 25.11.7"}, {"status": "affected", "version": "26.05.0 through 26.05.3"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys."}]}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65138"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-65138"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-03T17:47:45.478433Z", "id": "CVE-2026-65138", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T18:27:14.810Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65138", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2026-07-21T17:16:49.701Z", "datePublished": "2026-11-03T15:34:12.469Z", "dateUpdated": "2026-11-03T18:27:14.810Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-11-03T15:34:12.469Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Escalation of privileges"}, {"lang": "en", "value": "Information disclosure"}]}], "affected": [{"vendor": "NVIDIA", "product": "Slurm", "versions": [{"status": "affected", "version": "25.05.0 through 25.05.8"}, {"status": "affected", "version": "25.11.0 through 25.11.7"}, {"status": "affected", "version": "26.05.0 through 26.05.3"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys."}]}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65138"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-65138"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-65138", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-03T17:47:45.478433Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T17:47:46.109Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Slurm", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "25.05.0 through 25.05.8"}, {"status": "affected", "version": "25.11.0 through 25.11.7"}, {"status": "affected", "version": "26.05.0 through 26.05.3"}]}], "source": "psirt@nvidia.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys."}], "id": "CVE-2026-65138", "lastModified": "2026-11-03T19:18:09.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.2, "source": "psirt@nvidia.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65138", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-03T17:47:45.478433Z", "version": "2.0.3"}}]}, "published": "2026-11-03T16:17:35.687", "references": [{"source": "psirt@nvidia.com", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65138"}, {"source": "psirt@nvidia.com", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65138"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{"bugzilla": {"description": "slurm: slurm: Information disclosure via arbitrary memory read in slurmstepd socket API", "id": "2565966", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2565966"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-125", "details": ["NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.", "A flaw was found in Slurm. A local user can trigger an arbitrary memory read vulnerability through the slurmstepd daemon socket Application Programming Interface (API). This issue allows an attacker to cause information disclosure by reading sensitive process memory, potentially exfiltrating authentication keys and compromising system security."], "mitigation": {"lang": "en:us", "value": "No fixed upstream release is identified in the CVE record (affected ranges 25.05.0\u201325.05.8, 25.11.0\u201325.11.7, 26.05.0\u201326.05.3). The flaw requires local access with valid credentials and high attack complexity (AV:L/AC:H/PR:L); restricting local access to nodes running slurmstepd reduces exposure until a fixed release is available."}, "name": "CVE-2026-65138", "public_date": "2026-11-03T15:34:12Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-65138\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65138"], "statement": "A flaw was found in Slurm. A local user can trigger an arbitrary memory read through the slurmstepd daemon socket API, potentially disclosing sensitive process memory including authentication keys. Red Hat does not ship slurm in supported products; the component is present in Fedora and EPEL, where it is handled by community maintainers. CVSS 6.3 (MODERATE).", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[25.05.0,25.05.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[25.11.0,25.11.7]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[26.05.0,26.05.3]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Slurm", "source": "cna", "vendor": "NVIDIA"}, "product": "slurm", "vendor": "nvidia"}], "created": "2026-11-03T17:00:16.617797+00:00", "title": "NVIDIA Slurm Arbitrary Memory Read Enables Exfiltration of Authentication Keys", "updated": "2026-11-06T21:41:26.712855+00:00", "vendors": ["nvidia", "nvidia$PRODUCT$slurm"]}