Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-50868

11
FAUCET Score

CVE-2022-50868 is a vulnerability in the Linux kernel's hwrng AMD driver, specifically a PCI device reference count leak. This issue arises from improper handling of reference counts when iterating through PCI devices, potentially leading to resource exhaustion or system instability. While no CVSS score is available, its EPSS score is very low, and its FAUCET Risk Score is 7/100, suggesting a low severity and limited potential impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
LinuxLinux
2.6.18CNA affecteddefault affected
LinuxLinux
>= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < 1199f8e02941b326c60ab71a63002b7c80e38212, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < 2b79a5e560779b35e1164d57ae35c48b43373082, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < 2e10ecd012ae2b2a374b34f307e9bc1e6096c03d, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < 526c316948819d3ecd2bb20fe5e2580c51a1b760, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < 5998e5c30e839f73e62cb29e0d9617b0d16ccba3, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < cb348c7908631dd9f60083a0a1542eab055d3edf, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < e246f5eff26055bdcb61a2cc99c50af72a19680f, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < ecadb5b0111ea19fc7c240bb25d424a94471eb7d, >= 96d63c0297ccfd6d9059c614b3f5555d9441a2b3, < f1c97f72ffd504f49882774e2ab689d982dc7afcCNA affecteddefault unaffected

CVSS Data

CVSS data has not been published for this CVE.

Exploit Intelligence

EPSS Score
0.20%
Probability of exploitation in next 30 days
EPSS Percentile
10.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15

Social Chatter

Media Mentions

No media coverage found for this CVE.

Remediation

Vendor Patches (6)

redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (1)

redhatCVE-2022-50868Low

kernel: hwrng: amd - Fix PCI device refcount leak

Dec 30, 2025

References

git.kernel.org / stable/c/1199f8e02941b326c60ab71a63002b7c80e38212
git.kernel.org / stable/c/2b79a5e560779b35e1164d57ae35c48b43373082
git.kernel.org / stable/c/2e10ecd012ae2b2a374b34f307e9bc1e6096c03d
git.kernel.org / stable/c/526c316948819d3ecd2bb20fe5e2580c51a1b760
git.kernel.org / stable/c/5998e5c30e839f73e62cb29e0d9617b0d16ccba3
git.kernel.org / stable/c/cb348c7908631dd9f60083a0a1542eab055d3edf
git.kernel.org / stable/c/e246f5eff26055bdcb61a2cc99c50af72a19680f
git.kernel.org / stable/c/ecadb5b0111ea19fc7c240bb25d424a94471eb7d
git.kernel.org / stable/c/f1c97f72ffd504f49882774e2ab689d982dc7afc