Every CVE Search/ Get API key

CVE-2025-2296

Un-verified kernel bypass Secure Boot mechanism in direct boot mode

8.4 HighFix available

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
Low

Exploit likelihood

0.77%Up 0.6 points since Dec 10, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.4

Un-verified kernel bypass Secure Boot mechanism in direct boot mode

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
CVE-2025-2296
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2025-201946 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
EUVD-2025-201946
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-3f33-424w-8gqc 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by...

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
GHSA-3f33-424w-8gqc
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-20
Updated
2026-11-02
NVD 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
CVE-2025-2296
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-20
Updated
2026-11-02
OSV 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
CVE-2025-2296
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVDEBIAN-CVE-2025-2296 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
DEBIAN-CVE-2025-2296
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 8 moreShow less
OSVRHSA-2026:18465 8.2

Red Hat Security Advisory: edk2 security update

Record
RHSA-2026:18465
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:18465 8.2

Important: edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

  • edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Record
RLSA-2026:18465
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-2296 8.4

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
UBUNTU-CVE-2025-2296
CVSS 4.0
8.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L
Updated
2026-11-02
OSVALSA-2026:18465 No score

Important: edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

  • edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2026:18465
Updated
2026-11-02
OSVAZL-72545 No score

CVE-2025-2296 affecting package edk2 for versions less than 20240524git3e722403cd16-11

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
AZL-72545
Updated
2026-11-05
OSVAZL-72556 No score

CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
AZL-72556
Updated
2026-11-02
OSVAZL-72559 No score

CVE-2025-2296 affecting package hvloader for versions less than 1.0.1-15

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Record
AZL-72559
Updated
2026-11-02
OSVopenSUSE-SU-2026:10467-1 No score

ovmf-202602-6.1 on GA media

These are all security issues fixed in the ovmf-202602-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10467-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
edk2-aarch64
AlmaLinux:10
 before 20251114-5.el10_2
20251114-5.el10_2
edk2-ovmf
AlmaLinux:10
 before 20251114-5.el10_2
20251114-5.el10_2
edk2-tools
AlmaLinux:10
 before 20251114-5.el10_2
20251114-5.el10_2
edk2-tools-doc
AlmaLinux:10
 before 20251114-5.el10_2
20251114-5.el10_2
edk2
Azure Linux:3
 before 20240524git3e722403cd16-11
20240524git3e722403cd16-11
edk2
Azure Linux:2
 before 20230301gitf80f052277c8-44
20230301gitf80f052277c8-44
hvloader
Azure Linux:2
 before 1.0.1-15
1.0.1-15
edk2
Alpaquita:23
 0.0.202208-r0 up to 0.0.202508-r1
0.0.202508-r1
edk2
Alpaquita:25
 0.0.202308-r2 up to 0.0.202508-r1
0.0.202508-r1
edk2
Alpaquita:stream
 0.0.202302-r0 up to 0.0.202508-r0
0.0.202508-r0
Show 18 moreShow less
Affected packages
PackageAffectedFixed
edk2
Debian:12
 All versions, plus listed versions
2022.11-62022.11-6+deb12u12022.11-6+deb12u22023.02-12023.02-2
Show 45 moreShow less
2023.05-12023.05-22023.08-12023.11-12023.11-22023.11-32023.11-42023.11-52023.11-62023.11-72023.11-82024.02-12024.02-22024.05-12024.05-22024.08-12024.08-22024.08-32024.08-42024.11-12024.11-22024.11-32024.11-42024.11-52025.02-12025.02-102025.02-22025.02-32025.02-42025.02-52025.02-62025.02-72025.02-82025.02-92025.05-12025.05-22025.08.01-12025.08.01-22025.08.01-32025.08.01-42025.08.01-52025.08.01-62025.11-12025.11-22025.11-3
 None known
edk2
Debian:13
 before 2025.02-1
2025.02-1
edk2
Debian:14
 before 2025.02-1
2025.02-1
edk2
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-aarch64
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-ovmf
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-debugsource
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-tools
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-tools-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2-tools-doc
Red Hat:enterprise_linux:10.2
 before 0:20251114-5.el10_2
0:20251114-5.el10_2
edk2
Rocky Linux:10
 before 0:20251114-5.el10
0:20251114-5.el10
edk2
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0~20150106.5c2d456b-20~20160104.c2a892d7-10~20160408.ffea0a2c-20~20160408.ffea0a2c-2ubuntu0.10~20160408.ffea0a2c-2ubuntu0.20~20160408.ffea0a2c-2ubuntu0.2+esm10~20160408.ffea0a2c-2ubuntu0.2+esm30~20160408.ffea0a2c-2ubuntu0.2+esm4
 None known
edk2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0~20170911.5dfba97c-10~20171010.234dbcef-10~20171027.76fd5a66-10~20171205.a9212288-10~20180105.0bc94c74-1
Show 8 moreShow less
0~20180205.c0d9813c-10~20180205.c0d9813c-20~20180205.c0d9813c-2ubuntu0.10~20180205.c0d9813c-2ubuntu0.20~20180205.c0d9813c-2ubuntu0.30~20180205.c0d9813c-2ubuntu0.3+esm10~20180205.c0d9813c-2ubuntu0.3+esm20~20180205.c0d9813c-2ubuntu0.3+esm3
 None known
edk2
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0~20190606.20d2e5a1-2ubuntu10~20190828.37eef910-30~20190828.37eef910-40~20191122.bd85bf54-10~20191122.bd85bf54-1ubuntu1
Show 11 moreShow less
0~20191122.bd85bf54-20~20191122.bd85bf54-2ubuntu10~20191122.bd85bf54-2ubuntu20~20191122.bd85bf54-2ubuntu30~20191122.bd85bf54-2ubuntu3.10~20191122.bd85bf54-2ubuntu3.20~20191122.bd85bf54-2ubuntu3.30~20191122.bd85bf54-2ubuntu3.40~20191122.bd85bf54-2ubuntu3.50~20191122.bd85bf54-2ubuntu3.60~20191122.bd85bf54-2ubuntu3.6+esm1
 None known
edk2
Ubuntu:22.04:LTS
 All versions, plus listed versions
2021.08~rc0-22021.08-32021.11~rc1-12021.11-12021.11-2
Show 12 moreShow less
2022.02~rc1-12022.02~rc1-1ubuntu12022.02-12022.02-22022.02-32022.02-3ubuntu0.22.04.12022.02-3ubuntu0.22.04.22022.02-3ubuntu0.22.04.32022.02-3ubuntu0.22.04.42022.02-3ubuntu0.22.04.52022.02-3ubuntu0.22.04.62022.02-3ubuntu0.22.04.7
 None known
edk2
Ubuntu:24.04:LTS
 All versions, plus listed versions
2023.05-22023.11-22023.11-32023.11-42023.11-5
Show 13 moreShow less
2023.11-62023.11-82024.02-12024.02-22024.02-2ubuntu0.12024.02-2ubuntu0.32024.02-2ubuntu0.42024.02-2ubuntu0.52024.02-2ubuntu0.62024.02-2ubuntu0.72024.02-2ubuntu0.82024.02-2ubuntu0.92024.02-2ubuntu0.10
 None known
edk2
Ubuntu:25.10
 All versions, plus listed versions
2025.02-3ubuntu22025.02-82025.02-8ubuntu12025.02-8ubuntu22025.02-8ubuntu32025.02-8ubuntu3.12025.02-8ubuntu3.2
 None known
ovmf
openSUSE:Tumbleweed
 before 202602-6.1
202602-6.1

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-2296 is a high vulnerability (CVSS 8.4) in Tianocore Edk2, published December 9, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in edk2-aarch64 20251114-5.el10_2.

References

Show 18 moreShow less
This page doesn't list everything

Left out here: 10 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open