Описание
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| edk2 | fixed | 2025.02-9 | package | |
| edk2 | fixed | 2025.02-8+deb13u1 | trixie | package |
| edk2 | no-dsa | bookworm | package | |
| edk2 | postponed | bullseye | package |
Примечания
https://github.com/tianocore/edk2/security/advisories/GHSA-vx5v-4gg6-6qxr
only arch: amd64, other arch (particularly i386) are not affected
EPSS
Связанные уязвимости
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Уязвимость среды с открытым исходным кодом для разработки UEFI EDK2, связанная с нарушением механизма защиты данных, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
EPSS