Red Hat Security Advisory

RHSA-2026:18465

edk2 security update

Released 2026-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) edk2-20251114-5.el10_2, edk2-aarch64-20251114-5.el10_2, edk2-ovmf-20251114-5.el10_2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) edk2-aarch64-20251114-5.el10_2, edk2-ovmf-20251114-5.el10_2, edk2-tools-20251114-5.el10_2 +1

TI-2025-02016 CVE-2025-2296 · GHSA-3f33-424w-8gqc

LOW 38

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access.

CVSS 4.0HIGH 8.4 Network High privileges No interaction EPSS 0.00772 Published 2025-12-09 Partial fix · edk2-stable202502 CWE-20