CVE-2026-97631: Pre-boot RCE in EDK II PXE driver
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
azurelinux/edk2to a version that resolves this vulnerability.Fixed in 20240524git3e722403cd16-22
Event History
Frequently Asked Questions
Which systems are exposed?
Systems with a BIOS that includes the TianoCore EDK II PXE driver are the relevant population. The issue is reachable through remote access.
What does an attacker need to exploit this issue?
The available information identifies remote access as the attack vector. No requirement for local access or prior authentication is stated.
What is the potential impact of successful exploitation?
Successful exploitation can result in arbitrary code execution. Confidentiality, integrity, and availability may also be affected.