CVE-2022-1665: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-1665 is a security vulnerability discovered in Red Hat Enterprise Linux for IBM Power architecture, where pre-production kernel packages could be booted by GRUB in Secure Boot mode. The vulnerability was discovered and reported on May 23, 2022. The issue affects Red Hat Enterprise Linux systems running on IBM Power architecture (Red Hat Bugzilla).

The vulnerability stems from pre-production kernel packages being signed with Red Hat's production secure boot keys. These kernel builds lack secure boot lockdown patches and can bypass secure boot validations. This allows kernel versions intended for testing to boot in PowerPC environments with Secure Boot enabled (Red Hat Bugzilla).

The vulnerability could allow an attacker to load untrusted code into the system, potentially compromising the security benefits provided by Secure Boot. However, exploitation requires high privileges to install non-production kernel packages and configure them as the default boot option in GRUB2 (Red Hat Bugzilla).

Red Hat has addressed this issue by updating the PPC64LE key following the resolution of CVE-2022-1665 (Red Hat Advisory).