← Vulnerability feed

Vulnerability record · CVE-2022-2274 · published 1 July 2022

CVE-2022-2274: OpenSSL 3.0.4 RSA AVX512IFMA memory corruption

OOpenssl · Openssl

OpenSSL 3.0.4 introduced a bug in the RSA implementation for X86_64 CPUs supporting AVX512IFMA instructions, causing 2048-bit private key operations to be incorrect and to corrupt memory during computation. Because this affects TLS and other servers performing RSA private key operations, it can lead to remote code execution on affected hosts.

9.8 CVSS 3.1 Critical EPSS 46% · top 1.2% CWE-787 · Out-of-bounds write
9.8CVSS 3.1 base score, v2 10.0
46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
8References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: high.

critical priorityCVSS 9.8 with network reachability, no authentication, and potential remote code execution, though exploitation is not confirmed in KEV.

What it is

OpenSSL 3.0.4 introduced a bug in the RSA implementation for X86_64 CPUs supporting AVX512IFMA instructions, causing 2048-bit private key operations to be incorrect and to corrupt memory during computation. Because this affects TLS and other servers performing RSA private key operations, it can lead to remote code execution on affected hosts.

Impact

An attacker may achieve remote code execution on the machine performing the RSA computation, with full loss of confidentiality, integrity and availability per the CVSS vector.

Attack surface

Reachable over the network (AV:N) with no privileges or user interaction required (PR:N/UI:N); any service that performs 2048-bit RSA private key operations on an affected CPU is exposed.

Exploitation

Not listed in CISA KEV and no ransomware use documented; EPSS is high (0.457, 98.7th percentile) and one reference is tagged Exploit, but no confirmed in-the-wild exploitation is stated.

What to do

  • Upgrade OpenSSL to a version after 3.0.4 that contains the fix commit 4d8a88c134df634ba610ff8db1eb8478ac5fd345.
  • If immediate upgrade is not possible, avoid running 2048-bit RSA private key operations on X86_64 hosts with AVX512IFMA, or use ECC keys instead.
  • Apply vendor advisories for affected NetApp products (SnapCenter and H-series firmware) per ntap-20220715-0010.
  • Inventory OpenSSL 3.0.4 deployments and confirm whether host CPUs advertise AVX512IFMA.
  • Monitor for crashes or unexpected behavior in TLS/RSA services as an indicator of the memory corruption.

Detection

  • Identify hosts running OpenSSL 3.0.4 via package inventory or version scanning.
  • Check CPU flags for avx512ifma on systems performing RSA private key operations.
  • Monitor TLS/RSA service logs and crash dumps for memory corruption or abnormal terminations.
  • Watch for unexpected process crashes or restarts in services using 2048-bit RSA keys.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345
https://github.com/openssl/openssl/issues/18625 ExploitIssue TrackingThird Party Advisory
https://security.netapp.com/advisory/ntap-20220715-0010/ Third Party Advisory
https://www.openssl.org/news/secadv/20220705.txt Vendor Advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345
https://github.com/openssl/openssl/issues/18625 ExploitIssue TrackingThird Party Advisory
https://security.netapp.com/advisory/ntap-20220715-0010/ Third Party Advisory
https://www.openssl.org/news/secadv/20220705.txt Vendor Advisory

Track CVE-2022-2274 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2024-54085AMI MegaRAC SPx BMC authentication bypass via Redfish Host InterfaceAMI's SPx BMC implementation contains an authentication bypass reachable remotely through the Redfish Host Interface, classified as CWE-290 (authenti…KEVEPSS 61%analysed8.4CVE-2022-0185Linux Kernel Filesystem Context Heap Buffer OverflowThe legacy_parse_param function in the Linux kernel's Filesystem Context functionality fails to properly verify supplied parameter lengths, causing a…KEVEPSS 25%analysed7.8CVE-2024-1086Linux kernel nf_tables use-after-free allows local privilege escalationThe Linux kernel's netfilter nf_tables component has a use-after-free in nft_verdict_init(), where positive drop errors are accepted and nf_hook_slow…KEVEPSS 28%analysed7.8CVE-2023-4911GNU C Library ld.so GLIBC_TUNABLES heap buffer overflowThe GNU C Library dynamic loader ld.so mishandles the GLIBC_TUNABLES environment variable, causing a heap-based buffer overflow and out-of-bounds wri…KEVEPSS 81%analysed7.8CVE-2023-0386Linux kernel OverlayFS setuid copy privilege escalationA uid mapping bug in the Linux kernel OverlayFS subsystem lets a local user copy a file with capabilities from a nosuid mount into another mount, byp…KEVEPSS 7.9%analysed7.8CVE-2022-0995Linux kernel watch_queue out-of-bounds writeThe Linux kernel's watch_queue event notification subsystem contains an out-of-bounds write (CWE-787) that can overwrite kernel state. A local user c…KEVEPSS 8.8%analysed7.8CVE-2022-0847Linux kernel pipe buffer flaw allows local privilege escalationThe flags member of the new pipe buffer structure was not properly initialized in copy_page_to_iter_pipe and push_pipe, so it could hold stale values…KEVEPSS 93%analysed7.8CVE-2022-0492Linux kernel cgroups v1 release_agent privilege escalation and container escapeThe Linux kernel's cgroup_release_agent_write in kernel/cgroup/cgroup-v1.c mishandles authorization, letting the cgroups v1 release_agent feature be …KEVEPSS 5.5%analysed

Source: NIST National Vulnerability Database (record CVE-2022-2274), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.