Red Hat Security Advisory

RHSA-2024:4747

edk2 security update

Released 2024-07-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.8) edk2-20220126gitbb1bba3d77-4.el8_8.4, edk2-aarch64-20220126gitbb1bba3d77-4.el8_8.4, edk2-ovmf-20220126gitbb1bba3d77-4.el8_8.4

TI-2024-01208 CVE-2024-1298 · GHSA-xvcj-qw55-xx42

MEDIUM 60

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00219 Published 2024-05-30 Fixed in edk2-stable202405 CWE-369