CVE-2022-1665

Katalog CVE

CVSS 8.2 · High EPSS 0,27%

Kerentanan Public Key Re-Use for Signing both Debug and Production Code pada redhat enterprise linux. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.

Rincian

Terbit di NVD

21 Juni 2022

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1291: Public Key Re-Use for Signing both Debug and Production Code

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2089529 issue tracking · advisory vendor