{"id":"CVE-2021-38578","aliases":["ALSA-2023:2165","DEBIAN-CVE-2021-38578","DLA-4207-1","EUVD-2021-25020","GHSA-grqq-3jqg-g95p","OESA-2022-2122","RHSA-2023:2165","SUSE-SU-2023:1921-1","SUSE-SU-2023:1940-1","SUSE-SU-2023:1941-1","SUSE-SU-2023:1958-1","SUSE-SU-2023:1968-1","SUSE-SU-2023:2234-1","UBUNTU-CVE-2021-38578","USN-7060-1","openSUSE-SU-2024:12542-1"],"status":"published","title":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01019,"percentile":0.63833,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-124","CWE-787"],"published":"2022-03-03T21:53:37Z","modified":"2026-10-29T11:30:52Z","fixes":[{"ecosystem":"Debian:12","package":"edk2","fixed_in":["2022.11-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["2022.11-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["2022.11-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"edk2","fixed_in":["202002-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"edk2","fixed_in":["202002-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"edk2","fixed_in":["202011-7.oe2203"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","fixed_in":["0~20160408.ffea0a2c-2ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","fixed_in":["0~20180205.c0d9813c-2ubuntu0.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"edk2","fixed_in":["0~20191122.bd85bf54-2ubuntu3.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"edk2","fixed_in":["2022.02-3ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ovmf","fixed_in":["202211-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.11-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.11-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.11-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.11-2+deb11u3"}]}],"versions":["2020.11-2","2020.11-2+deb11u1","2020.11-2+deb11u2"],"bundled":16},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-7.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"201911-150200.7.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"201911-150200.7.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"201911-150200.7.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"201911-150200.7.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.41.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202008-150300.10.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015+git1462940744.321151f-19.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20160408.ffea0a2c-2ubuntu0.2+esm3"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20180205.c0d9813c-2ubuntu0.3+esm2"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.6"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4","0~20191122.bd85bf54-2ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.3"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20160408.ffea0a2c-2ubuntu0.2+esm3"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20180205.c0d9813c-2ubuntu0.3+esm2"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.6"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4","0~20191122.bd85bf54-2ubuntu3.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.3"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202211-1.1"}]}]}],"products":[{"vendor":"insyde","product":"kernel"},{"vendor":"tianocore","product":"edk ii"},{"vendor":"tianocore","product":"edk2"}],"references":[{"url":"https://bugzilla.tianocore.org/show_bug.cgi?id=3387","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://www.insyde.com/security-pledge/SA-2023024","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38578","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-grqq-3jqg-g95p"},{"url":"https://access.redhat.com/errata/RHSA-2023:2165","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-38578","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4304","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4450","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0215","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0286","tags":["report"]},{"url":"https://bugzilla.redhat.com/1960321","tags":["report"]},{"url":"https://bugzilla.redhat.com/2164440","tags":["report"]},{"url":"https://bugzilla.redhat.com/2164487","tags":["report"]},{"url":"https://bugzilla.redhat.com/2164492","tags":["report"]},{"url":"https://bugzilla.redhat.com/2164494","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2165.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-38578","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2122","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174605","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2165.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38578","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4304","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230207.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4450","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0215","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0286","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231921-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1174246","tags":["report"]},{"url":"https://bugzilla.suse.com/1196741","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38578","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231940-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231941-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231958-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231968-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38578","tags":["report"]},{"url":"https://edk2.groups.io/g/devel/message/90516","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7060-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-0161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-28210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-28211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1292","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-38578","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T21:53:37Z","modified":"2025-11-03T19:26:15.934Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-124"],"updated_at":"2026-11-02T14:33:07.349244Z"}],"euvd":[{"id":"EUVD-2021-25020","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T21:53:37Z","modified":"2025-11-03T19:26:15Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-grqq-3jqg-g95p","title":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-04T00:00:16Z","modified":"2025-11-03T21:30:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-124","CWE-787"],"updated_at":"2026-11-02T15:04:18.176646Z"}],"nvd":[{"id":"CVE-2021-38578","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T22:15:08.423Z","modified":"2026-06-17T04:02:23.777Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-124","CWE-787"],"updated_at":"2026-11-02T14:07:05.198719Z"}],"osv":[{"id":"CVE-2021-38578","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T22:15:08.423Z","modified":"2026-10-24T10:30:58.163992371Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-38578","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T22:15:08.423Z","modified":"2026-10-23T18:03:50.354821417Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2022-2122","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. \r\n\r\nSecurity Fix(es):\r\n\r\nExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.(CVE-2021-38578)","status":"published","published":"2022-12-02T11:05:26Z","modified":"2026-08-18T01:17:26.84651097Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2165","title":"Red Hat Security Advisory: edk2 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T09:06:15Z","modified":"2026-10-15T10:03:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2021-38578","description":"Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","status":"published","published":"2022-03-03T22:15:00Z","modified":"2026-02-04T03:31:59.686913Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2023:2165","title":"Important: edk2 security, bug fix, and enhancement update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)\n* edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation (CVE-2021-38578)\n* openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)\n* openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)\n* openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:52.693252589Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-4207-1","title":"edk2 - security update","status":"published","published":"2025-06-02T00:00:00Z","modified":"2026-03-09T01:21:23.402813Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2024:12542-1","title":"ovmf-202211-1.1 on GA media","description":"These are all security issues fixed in the ovmf-202211-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:45:29.073091Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:1921-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n  \n- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). \n- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).\n","status":"published","published":"2023-04-19T16:07:13Z","modified":"2026-02-04T04:39:40.249723Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1940-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). \n- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).\n","status":"published","published":"2023-04-21T10:00:34Z","modified":"2026-02-04T04:10:22.717364Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1941-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). \n- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).\n","status":"published","published":"2023-04-21T10:00:48Z","modified":"2026-02-04T04:36:36.330847Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1958-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). \n- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).\n","status":"published","published":"2023-04-24T11:06:00Z","modified":"2026-02-04T04:13:33.840133Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1968-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). \n- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).\n","status":"published","published":"2023-04-24T13:19:22Z","modified":"2025-05-02T04:30:05.611483Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2234-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741).\n- CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() return value (bsc#1174246).\n- revert a patch to fix xen boot problems (bsc#1205613)\n","status":"published","published":"2023-05-17T14:22:24Z","modified":"2026-02-04T04:01:02.930015Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-7060-1","title":"edk2 vulnerabilities","description":"It was discovered that EDK II did not check the buffer length in XHCI, \nwhich could lead to a stack overflow. A local attacker could potentially\nuse this issue to cause a denial of service. This issue only affected \nUbuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-0161)\n\nLaszlo Ersek discovered that EDK II incorrectly handled recursion. A\nremote attacker could possibly use this issue to cause EDK II to consume\nresources, leading to a denial of service. This issue only affected \nUbuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2021-28210)\n\nSatoshi Tanda discovered that EDK II incorrectly handled decompressing\ncertain images. A remote attacker could use this issue to cause EDK II to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2021-28211)\n\nIt was discovered that EDK II incorrectly decoded certain strings. A remote\nattacker could use this issue to cause EDK II to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only \naffected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2021-38575)\n\nIt was discovered that EDK II had integer underflow vulnerability in \nSmmEntryPoint, which could result in a buffer overflow. An attacker\ncould potentially use this issue to cause a denial of service.\n(CVE-2021-38578)\n\nElison Niven discovered that OpenSSL, vendored in EDK II, incorrectly \nhandled the c_rehash script. A local attacker could possibly use this \nissue to execute arbitrary commands when c_rehash is run. This issue \nonly affected Ubuntu 16.04 LTS. (CVE-2022-1292)\n","status":"published","published":"2024-10-10T03:41:37Z","modified":"2026-06-25T13:32:29.224935972Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}