Skip to content
OpenAdvisories
Critical RHSA-2026:97212 1 CVE

Red Hat Security Advisory: edk2 security, bug fix, and enhancement update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.3 edk2 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-aarch64 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-debugsource 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-ovmf 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-tools 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-tools-debuginfo 0:20260221-7.el10
Red Hat · RHEL 10 enterprise_linux:10.3 edk2-tools-doc 0:20260221-7.el10

Vulnerabilities 1

  • Critical 9.8
    CVE-2024-4741

    Use After Free with SSL_free_buffers

    Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.3_release_notes/index
  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2283757
  • article
    https://issues.redhat.com/browse/RHEL-151719
  • article
    https://issues.redhat.com/browse/RHEL-182419
  • article
    https://issues.redhat.com/browse/RHEL-188305
  • article
    https://issues.redhat.com/browse/RHEL-193127
  • article
    https://issues.redhat.com/browse/RHEL-220548
  • article
    https://issues.redhat.com/browse/RHEL-235957
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97212.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-4741
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4741
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4741
  • article
    https://www.openssl.org/news/secadv/20240528.txt