RLSA-2026:96240

Security

Mirrored from RHSA-2026:96240

Issued at: 2026-11-10

Updated at: 2026-11-10

Advisory content derived from Red Hat RHSA-2026:96240, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Critical: edk2 security update

Description

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2559129

CVEs

CVE-2026-97631

Affected packages

Rocky Linux 10 aarch64 - CRB

edk2-debugsource-0:20251114-5.el10_2.3.aarch64.rpm

edk2-tools-0:20251114-5.el10_2.3.aarch64.rpm

edk2-ovmf-0:20251114-5.el10_2.3.noarch.rpm

edk2-tools-doc-0:20251114-5.el10_2.3.noarch.rpm

edk2-tools-debuginfo-0:20251114-5.el10_2.3.aarch64.rpm