Zurück zu den Sicherheitshinweisen

Edk2 Security Update — AlmaLinux 10 (ALSA-2026:96240)

ALSA-2026:96240 fixes CVE-2026-97631 in the edk2 firmware packages on AlmaLinux 10 — a pre-boot remote code execution flaw in the EDK II PXE network stack (CVSS 9.5). The flaw lets an attacker on the network exploit the PXE boot path before the operating system loads. Update and re-provision: dnf update edk2 and rebuild any PXE boot images from the patched firmware.

Critical 9.5 CVSS
AlmaLinux 10

Was das unter einer SharedLicense-Lizenz bedeutet

Pre-boot execution means the compromise happens before the OS and all its defenses load — a network-adjacent attacker can pivot straight into the firmware layer, which survives OS reinstalls.

Type:

security

Severity:

critical

Release date:

2026-11-10

Description:

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 edk2-tools-20251114-5.el10_2.3.alma.1.aarch64.rpm 16db10d92bc10675323ad3c76e607853a26bfdb1bd0da9ca6ff7a2a465410de2
noarch edk2-aarch64-20251114-5.el10_2.3.alma.1.noarch.rpm ae015f7b36ccf5b1416efe1b966ecac74b8befed2289b62c3a1510924db7ad75
noarch edk2-ovmf-20251114-5.el10_2.3.alma.1.noarch.rpm b2a18bf00300eaeca141ef0988cc1a12129a68b9e7219a07a6183a2fe2251fb3
noarch edk2-tools-doc-20251114-5.el10_2.3.alma.1.noarch.rpm d0b002d96fd5855e077a39827c1a0b1c51422ad1faca626b7cc5284cae89ef4b
x86_64 edk2-tools-20251114-5.el10_2.3.alma.1.x86_64.rpm 01087afee2faa83271cd8343a7d03cac4154ec824fa0425f6f458a38ca266e11
x86_64_v2 edk2-tools-20251114-5.el10_2.3.alma.1.x86_64_v2.rpm 62098b3b4fa5db60bf9221d74320f3d633ae7714900ef305f21e24c2527117c2

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Häufig gestellte Fragen

What is CVE-2026-97631?
It is a pre-boot remote code execution flaw in the EDK II PXE network stack, shipped as the 64-bit UEFI firmware for QEMU and KVM in the edk2 packages. CVSS 9.5; fixed in the AlmaLinux 10 update ALSA-2026:96240 (released November 10, 2026).
Who is affected?
AlmaLinux 10 hosts using PXE network boot with the edk2 firmware package — virtualization hosts provisioning VMs over the network are the primary exposure.
How do I apply the fix?
Run dnf update edk2 and regenerate any PXE boot images built from the package so the patched firmware is what network boots load.
Why does pre-boot execution matter so much?
Code running before the OS bypasses every OS-level defense — patching, EDR agents and hardening all load after the firmware, so a firmware implant persists across OS reinstalls.

Referenzen

Sicherheitshinweise

Verwandte Warnhinweise

Nodejs-Nodemon Security Update — AlmaLinux 10 (ALSA-2026:96236)

2026-11-10

Nodejs22 Security Update — AlmaLinux 10 (ALSA-2026:96094)

2026-11-10

Nodejs24 Security Update — AlmaLinux 10 (ALSA-2026:96088)

2026-11-10

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen