Summary
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es):
* edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | edk2-aarch64 | 20251114-5.el10_2 |
| AlmaLinux · 10 | edk2-ovmf | 20251114-5.el10_2 |
| AlmaLinux · 10 | edk2-tools | 20251114-5.el10_2 |
| AlmaLinux · 10 | edk2-tools-doc | 20251114-5.el10_2 |
Vulnerabilities 1
-
High 8.4
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and imp…