CVE-2022-1665: High severity redhat Enterprise Linux vulnerability

Published May 23, 2022

Updated

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.

Affected Software

1 affected component

redhat Enterprise Linux=8.0

Event History

May 23, 2022

Data Sourced

via Red Hat·10:49 PM

DescriptionSeverityAffected Software

Jun 21, 2022

CVE Published

via MITRE·02:23 PM

Data Sourced

via MITRE·02:23 PM

DescriptionWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which systems are in scope?

The issue applies to Red Hat Enterprise Linux systems on IBM Power architecture that have the affected pre-production kernel packages and use Secure Boot mode.

What level of access does an attacker need?

The CVSS vector indicates local access and high privileges are required. The vulnerability is therefore not described as remotely exploitable by an unauthenticated attacker.

What can an attacker do after exploiting this issue?

An attacker can bypass Secure Boot validations and load non-trusted code. The affected kernel builds lack the Secure Boot lockdown patches that should prevent this.

CVE-2022-1665: High severity redhat Enterprise Linux vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are in scope?

What level of access does an attacker need?

What can an attacker do after exploiting this issue?

Company

Resources

Contact

Frequently Asked Questions

Which systems are in scope?

What level of access does an attacker need?

What can an attacker do after exploiting this issue?