Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2022-1665
n/a Red Hat Enterprise Linux — A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot m…
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L H N C H H H 8.2 .0027 17.2 —
AFFECTED
Product Versions Fixed
Red Hat Enterprise Linux 8.6 – —
TIMELINE
May 10 Reserved by redhat
Jun 21 Published (CNA: redhat)
Oct 8 ENRICHED — CVE-2022-1665 (Red Hat Enterprise Linux). Received CVSS 8.2 and CPE data from NVD.
Description
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| May 10, 2022 | Reserved | Reserved by redhat |
| June 21, 2022 | Published | Published (CNA: redhat) |
| October 8, 2026 | ENRICHED | ENRICHED — CVE-2022-1665 (Red Hat Enterprise Linux). Received CVSS 8.2 and CPE data from NVD. |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| n/a | Red Hat Enterprise Linux | — | 8.6 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-1665 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
