Skip to content
OpenAdvisories
Critical RHSA-2026:96240 1 CVE

Red Hat Security Advisory: edk2 security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 edk2 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-aarch64 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-debugsource 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-ovmf 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-tools 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-tools-debuginfo 0:20251114-5.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 edk2-tools-doc 0:20251114-5.el10_2.3

Vulnerabilities 1

  • Critical 9.5
    CVE-2026-97631 Public exploit

    Pre-boot RCE in EDK II PXE driver

    EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It co…

    TianoCore EDK2 edk2 qemu Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2559129
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96240.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-97631
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-97631
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-97631
  • article
    https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m