CVE Vulnerabilities

CVE-2022-47022

NULL Pointer Dereference

Published: Aug 22, 2023 | Modified: Sep 06, 2023
CVSS 3.x
4.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
5.1 MODERATE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Hwloc Open-mpi 2.1.0 (including) 2.9.2 (including)
Hwloc Ubuntu bionic *
Hwloc Ubuntu lunar *
Hwloc Ubuntu mantic *
Hwloc Ubuntu trusty *
Hwloc Ubuntu xenial *

Potential Mitigations

References