Fedora 43 : edk2 (2026-a484707720)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a484707720 advisory. unbreak https boot ---- update openssl to 3.5.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2025-69419 affecting package edk2 for versions less than 20240524git3e722403cd16-15

CVE-2025-69419 affecting package edk2 for versions less than 20240524git3e722403cd16-15. A patched version of the package is available...

EulerOS Virtualization 2.12.1 : edk2 (EulerOS-SA-2026-1471)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2026-1528)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2026-1471)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-69418 affecting package edk2 for versions less than 20230301gitf80f052277c8-47

CVE-2025-69418 affecting package edk2 for versions less than 20230301gitf80f052277c8-47. A patched version of the package is available...

CVE-2026-22796 affecting package edk2 for versions less than 20230301gitf80f052277c8-47

CVE-2026-22796 affecting package edk2 for versions less than 20230301gitf80f052277c8-47. A patched version of the package is available...

CVE-2025-68160 affecting package edk2 for versions less than 20230301gitf80f052277c8-47

CVE-2025-68160 affecting package edk2 for versions less than 20230301gitf80f052277c8-47. A patched version of the package is available...

RockyLinux 9 : edk2 (RLSA-2026:2776)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:2776 advisory. openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-9230 Tenable has extracted the preceding description block directly from the RockyLinux securi...

RHSA-2026:3164 Red Hat Security Advisory: edk2 security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

MiracleLinux 9 : edk2-20241117-4.el9_7.3 (AXSA:2026-204:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-204:01 advisory. openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-9230 Tenable has extracted the preceding description block directly from the MiracleLinux...

Important: edk2

Issue Overview: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. CVE-2025-68160 When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths,...

Low: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : edk2 (RHSA-2026:2776)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2776 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

edk2 security update

20241117-4.0.1.el97.3 - Replace upstream references Orabug:36569119 20241117-4.el97.3 - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch RHEL-125104 - edk2-MdePkg-Add-the-COHERENCYSFWNO-CPUID-bit-field.patch RHEL-125104 -...

Oracle Linux 9 : edk2 (ELSA-2026-2776)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2776 advisory. - Resolves: RHEL-115923 CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap rhel-9.7.z Tenable has extracted the preceding description block...

CVE-2026-22795 affecting package edk2 for versions less than 20230301gitf80f052277c8-46

CVE-2026-22795 affecting package edk2 for versions less than 20230301gitf80f052277c8-46. A patched version of the package is available...

CVE-2025-69419 affecting package edk2 for versions less than 20230301gitf80f052277c8-46

CVE-2025-69419 affecting package edk2 for versions less than 20230301gitf80f052277c8-46. A patched version of the package is available...

CVE-2025-69421 affecting package edk2 for versions less than 20230301gitf80f052277c8-46

CVE-2025-69421 affecting package edk2 for versions less than 20230301gitf80f052277c8-46. A patched version of the package is available...