Vulnerability · Published Jun 21, 2022 · Assigned by redhat
CVE-2022-1665
High 8.2
In plain English
A high-severity security flaw in Red Hat Enterprise Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS NVD)8.2High
Exploit odds (30 days)0.3%top 80.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Red Hat Enterprise Linux | 8.6 |
Weakness: CWE-1291
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2089529 x_refsource_MISC