Red Hat Security Advisory

RHSA-2024:5623

edk2 security update

Released 2024-08-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) edk2-20220126gitbb1bba3d77-2.el8_6.5, edk2-ovmf-20220126gitbb1bba3d77-2.el8_6.5
Red Hat Enterprise Linux AppStream E4S (v.8.6) edk2-20220126gitbb1bba3d77-2.el8_6.5, edk2-aarch64-20220126gitbb1bba3d77-2.el8_6.5, edk2-ovmf-20220126gitbb1bba3d77-2.el8_6.5
Red Hat Enterprise Linux AppStream TUS (v.8.6) edk2-20220126gitbb1bba3d77-2.el8_6.5, edk2-ovmf-20220126gitbb1bba3d77-2.el8_6.5

TI-2024-01208 CVE-2024-1298 · GHSA-xvcj-qw55-xx42

MEDIUM 60

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00219 Published 2024-05-30 Fixed in edk2-stable202405 CWE-369