CVE-2025-2295 affecting package edk2 for versions less than 20230301gitf80f052277c8-45

🗓️ 05 Feb 2026 22:09:14Reported by CBL MarinerType

Patched edk2 release available for Unix fixing the CVE-2025-2295 in older versions.

Reporter	Title	Published	Views	Family All 53
Tenable Nessus	Amazon Linux 2 : edk2 (ALAS-2025-2824)	17 Apr 202500:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : EDK II vulnerabilities (USN-7894-1)	3 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-2295	30 Aug 202500:00	–	nessus
Amazon	Low: edk2	16 Apr 202500:00	–	amazon
Amazon	Low: edk2	16 Apr 202500:00	–	amazon
AstraLinux	Astra Linux – Vulnerability in edk2	16 Jun 202511:28	–	astralinux
BDU FSTEC	The vulnerability of the SSLfree_buffers() function in the OpenSSL cryptographic library allows a hacker to execute arbitrary code or cause a service failure.	10 Jul 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the functions EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and BN_GF2m_*() in the Elliptic Curve API of the OpenSSL cryptographic library, which allows a hacker to execute arbitrary code.	30 Oct 202400:00	–	bdu_fstec
CBLMariner	CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14	9 Feb 202623:35	–	cbl_mariner
CBLMariner	CVE-2025-2295 affecting package hvloader for versions less than 1.0.1-16	5 Feb 202622:09	–	cbl_mariner