Every CVE Search/ Get API key

CVE-2022-47022

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...

4.7 MediumFix available

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.31%Up 0.3 points since Aug 23, 2023
90%50%10%1%

What each source reports

NVD Score used 4.7

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
CVE-2022-47022
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
CVE-2022-47022
Updated
2026-11-02
EUVDEUVD-2022-49800 No score

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
EUVD-2022-49800
Updated
2026-11-03
GitHub AdvisoriesGHSA-wrgx-2383-98cr 9.8

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
GHSA-wrgx-2383-98cr
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVAZL-28092 4.7

CVE-2022-47022 affecting package hwloc for versions less than 2.5.0-2

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
AZL-28092
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-28595 4.7

CVE-2022-47022 affecting package openmpi for versions less than 4.1.4-12

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
AZL-28595
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVAZL-34800 4.7

CVE-2022-47022 affecting package hwloc for versions less than 2.9.2-2

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
AZL-34800
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVAZL-35071 4.7

CVE-2022-47022 affecting package openmpi for versions less than 4.1.7-2

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
AZL-35071
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVDEBIAN-CVE-2022-47022 4.7

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
DEBIAN-CVE-2022-47022
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVJLSEC-2025-176 4.7

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
JLSEC-2025-176
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1589 9.8

hwloc security update

hwloc provides command line tools and a C API to obtain the hierarchical map of key computing elements, such as: NUMA memory nodes, shared caches, processor sockets, processor cores, and processor "threads". hwloc also gathers various attributes such as cache and memory information, and is portable across a variety of different operating systems and platforms.

Security Fix(es):

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.(CVE-2022-47022)

Record
OESA-2023-1589
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1590 9.8

hwloc security update

hwloc provides command line tools and a C API to obtain the hierarchical map of key computing elements, such as: NUMA memory nodes, shared caches, processor sockets, processor cores, and processor "threads". hwloc also gathers various attributes such as cache and memory information, and is portable across a variety of different operating systems and platforms.

Security Fix(es):

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.(CVE-2022-47022)

Record
OESA-2023-1590
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-47022 4.7

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
UBUNTU-CVE-2022-47022
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1785768115 No score

hwloc: Fix of CVE-2022-47022

  • CVE-2022-47022: handle glibc CPU set allocation failures
  • Skip tests/hwloc/linux/gather subdir in %check (DMI round-trip flake under mock)
Record
CLSA-2026-1785768115
Updated
2026-11-02
OSVCLSA-2026-1785770281 No score

hwloc: Fix of CVE-2022-47022

  • CVE-2022-47022: handle glibc CPU set allocation failures
  • Skip tests/hwloc/linux/gather subdir in %check (DMI round-trip flake under mock)
Record
CLSA-2026-1785770281
Updated
2026-11-02
OSV No score

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Record
CVE-2022-47022
Updated
2026-11-02
OSVopenSUSE-SU-2024:13347-1 No score

hwloc-2.9.3-1.1 on GA media

These are all security issues fixed in the hwloc-2.9.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13347-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hwloc
Azure Linux:2
 before 2.5.0-2
2.5.0-2
openmpi
Azure Linux:2
 before 4.1.4-12
4.1.4-12
hwloc
Azure Linux:3
 before 2.9.2-2
2.9.2-2
openmpi
Azure Linux:3
 before 4.1.7-2
4.1.7-2
hwloc
TuxCare:AlmaLinux:9.2
 before 2.4.1-5.el9_2.tuxcare.els1
2.4.1-5.el9_2.tuxcare.els1
hwloc-devel
TuxCare:AlmaLinux:9.2
 before 2.4.1-5.el9_2.tuxcare.els1
2.4.1-5.el9_2.tuxcare.els1
hwloc-gui
TuxCare:AlmaLinux:9.2
 before 2.4.1-5.el9_2.tuxcare.els1
2.4.1-5.el9_2.tuxcare.els1
hwloc-libs
TuxCare:AlmaLinux:9.2
 before 2.4.1-5.el9_2.tuxcare.els1
2.4.1-5.el9_2.tuxcare.els1
hwloc-plugins
TuxCare:AlmaLinux:9.2
 before 2.4.1-5.el9_2.tuxcare.els1
2.4.1-5.el9_2.tuxcare.els1
hwloc
TuxCare:AlmaLinux:9.6
 before 2.4.1-5.el9.tuxcare.els1
2.4.1-5.el9.tuxcare.els1
Show 15 moreShow less
Affected packages
PackageAffectedFixed
hwloc-devel
TuxCare:AlmaLinux:9.6
 before 2.4.1-5.el9.tuxcare.els1
2.4.1-5.el9.tuxcare.els1
hwloc-gui
TuxCare:AlmaLinux:9.6
 before 2.4.1-5.el9.tuxcare.els1
2.4.1-5.el9.tuxcare.els1
hwloc-libs
TuxCare:AlmaLinux:9.6
 before 2.4.1-5.el9.tuxcare.els1
2.4.1-5.el9.tuxcare.els1
hwloc-plugins
TuxCare:AlmaLinux:9.6
 before 2.4.1-5.el9.tuxcare.els1
2.4.1-5.el9.tuxcare.els1
hwloc
Debian:12
 All versions, plus listed versions
2.10.0-12.10.0-1~bpo12+12.10.0~rc1-12.10.0~rc1-22.10.0~rc2-1
Show 35 moreShow less
2.11.0-12.11.0-1~bpo12+12.11.0-22.11.0-2~bpo12+12.11.0~rc1-12.11.2-12.11.2-1~bpo12+12.12.0-12.12.0-1~bpo12+12.12.0-32.12.0-42.12.0-4~bpo12+12.12.0~rc1-12.12.1-12.12.1~rc1-12.12.2-12.12.2-1~bpo13+12.12.2~rc1-12.13.0-12.13.0-22.13.0-2~bpo13+12.13.0~rc1-12.14.0-12.14.0-22.14.0-2~bpo13+12.14.0~rc1-12.15.0-12.15.0-22.15.0~rc1-12.9.0-12.9.2-12.9.2-1~bpo12+12.9.3-12.9.3-1~bpo12+12.9.3-2
 None known
hwloc
Debian:13
 before 2.9.3-1
2.9.3-1
hwloc
Debian:14
 before 2.9.3-1
2.9.3-1
Hwloc_jll
Julia
 before 2.9.3+0
2.9.3+0
hwloc
openEuler:22.03-LTS-SP1
 before 2.7.1-2.oe2203sp1
2.7.1-2.oe2203sp1
hwloc
openEuler:22.03-LTS-SP2
 before 2.7.1-2.oe2203sp2
2.7.1-2.oe2203sp2
hwloc
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.7.1-11.7.2-11.8-11.8-1ubuntu11.8-1ubuntu1.14.04.1
 None known
hwloc
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.11.0-11.11.1-11.11.2-21.11.2-3
 None known
hwloc
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.11.5-11.11.8-11.11.9-1
 None known
hwloc
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.11.13-12.1.0+dfsg-22.1.0+dfsg-3ubuntu12.1.0+dfsg-4
 None known
hwloc
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.4.1+dfsg-12.6.0-12.7.0-12.7.0-22.7.0-2ubuntu1
 None known

History

History
RecordedChangedSources
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-47022 is a medium vulnerability (CVSS 4.7) in Open-mpi Hwloc, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in hwloc 2.5.0-2.

References

Show 6 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open