PT-2022-14033 · Red Hat · Red Hat

Marco Benatto · Published 2022-06-21 · Updated 2022-08-18 · CVE-2022-1665

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux for IBM Power architecture (affected versions not specified)

Description A set of pre-production kernel packages can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied, allowing an attacker to bypass secure boot validations and load non-trusted code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1291

Related Identifiers

CVE-2022-1665

Affected Products

Red Hat

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-1665 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2089529 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1665 · Vendor Advisory
• https://t.me/cibsecurity/44906 · Telegram Post
• https://t.me/cvenotify/34868 · Telegram Post