Altair Grid Engine (error message handling): Grid Engine leaks password hash material in error messages. Hashes lifted

Impact

Grid Engine leaks password hash material in error messages. Hashes lifted from a scheduler are directly crackable offline, and the accounts they belong to are the ones with rights over job placement.

Who can reach it

A local user able to provoke the error condition on a Grid Engine host. Affects all versions before V2026.0.0.

What to do

Upgrade Altair Grid Engine to V2026.0.0 and restart the daemons. Rotate the credentials for any account whose hash could have been exposed. Note that Altair advisories now ship through Siemens ProductCERT, not Altair's own site.

References

Related entries

• Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/ras): A NULL pointer dereference in the amdgpu RAS /CVE-2025-71293 · Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/ras)Medium
• Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuCVE-2025-71294 · Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu)Medium
• Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuCVE-2026-23163 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu)Medium
• Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A correctness defect in the amdgpu power managementCVE-2026-23213 · Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm)Medium
• Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A race condition or locking defectCVE-2026-23338 · Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq)Medium
• Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): Memory is handed to a consumer without beingCVE-2026-23358 · Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu)Medium