CVE-2025-2296: Un-verified kernel bypass Secure Boot mechanism in direct boot mode
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
Other sources
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2296?
The severity of CVE-2025-2296 is considered high due to the potential for arbitrary command execution.
How do I fix CVE-2025-2296?
To fix CVE-2025-2296, ensure that you upgrade to the latest version of EDK2 that addresses this vulnerability.
What type of vulnerability is CVE-2025-2296?
CVE-2025-2296 is classified as an Improper Input Validation vulnerability.
Who is affected by CVE-2025-2296?
CVE-2025-2296 affects systems running vulnerable versions of EDK2 firmware.
What are the potential consequences of exploiting CVE-2025-2296?
Exploitation of CVE-2025-2296 could lead to unauthorized control flow changes and compromise of system confidentiality.