RHSA-2024:10268: Moderate: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:10268?
The severity of RHSA-2024:10268 is classified as moderate due to the potential effect of integer overflow vulnerabilities.
How do I fix RHSA-2024:10268?
To fix RHSA-2024:10268, update the edk2 and edk2-ovmf packages to version 20220126gitbb1bba3d77-4.el8_8.7.
Which products are affected by RHSA-2024:10268?
Affected products include Red Hat Enterprise Linux for x86_64, ARM 64, and their related update packages.
What is CVE-2024-38796 in relation to RHSA-2024:10268?
CVE-2024-38796 refers to an integer overflow vulnerability found in the PeCoffLoaderRelocateImage function in the edk2 package.
Is there a recommended action for users of RHSA-2024:10268?
Users of RHSA-2024:10268 should apply the security updates as soon as possible to mitigate the vulnerability.