Wind River Support Network

HomeDefectsLIN1021-19984

Fixed

LIN1021-19984 : Security Advisory - ovmf - CVE-2024-38798

Created: Dec 10, 2025 Updated: Jun 8, 2026

Resolved Date: Jun 8, 2026

Found In Version: 10.21.20.1

Fix Version: 10.21.20.27

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

EDK2 contains a vulnerability in BIOS where an attacker may cause â\x80\x9cExposure of Sensitive Information to an Unauthorized Actorâ\x80\x9d by local access. Successful exploitation of this vulnerability will lead to [EOL][EOL]possible information disclosure or escalation of privilege[EOL][EOL] and impact Confidentiality.

CVEs

CVE-2024-38798