Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-50520

20
FAUCET Score

CVE-2022-50520 is a refcount leak vulnerability in the Linux kernel's radeon DRM driver, specifically within the radeon_atrm_get_bios() function, affecting Linux kernel versions. This flaw, rated Medium (CVSS 5.5), could lead to a denial of service (A:H) through local access (AV:L, PR:L) with low attack complexity (AC:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.2.29, < 3.3CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.2.60, < 3.3CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.4.12, < 3.5CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.5.5, < 3.6CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.6.1, < 4.9.337CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.15%
Probability of exploitation in next 30 days
EPSS Percentile
5.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0015 is in the 31st percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-513.5.1.el8_9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-362.8.1.el9_3
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (1)

redhatCVE-2022-50520Low

kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()

Oct 7, 2025

References

git.kernel.org / stable/c/1079df6acf56f99d86b0081a38c84701412cc90e
Patch
git.kernel.org / stable/c/3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4
Patch
git.kernel.org / stable/c/470a77989037c3ab2b08bf2d026d2c0ddc35ff5b
Patch
git.kernel.org / stable/c/6f28c7f67af4ef9bca580ab67ae2d4511797af56
Patch
git.kernel.org / stable/c/725a521a18734f65de05b8d353b5bd0d3ca4c37a
Patch
git.kernel.org / stable/c/88c6e0995c04b170563b5c894c50a3b2152e18c2
Patch
git.kernel.org / stable/c/a6cffe54064a5f6c2162a85af3c16c6b453eac4e
Patch
git.kernel.org / stable/c/b9decada8749b606fd8b4f04a3d6c74f7983d7bc
Patch
git.kernel.org / stable/c/e738f82e5b1311e8fb3d1409491a6fcce6418fbe
Patch