Wind River Support Network

HomeDefectsLIN1021-19996
Fixed

LIN1021-19996 : Security Advisory - ovmf - CVE-2025-2296

Created: Dec 10, 2025    Updated: Jun 8, 2026
Resolved Date: Jun 8, 2026
Found In Version: 10.21.20.1
Fix Version: 10.21.20.27
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

EDK2 contains a vulnerability in BIOS where an attacker may cause â\x80\x9c Improper Input Validationâ\x80\x9d by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube