Edk2 Security Update — AlmaLinux 10 (ALSA-2026:96240)

ALSA-2026:96240 fixes CVE-2026-97631 in the edk2 firmware packages on AlmaLinux 10 — a pre-boot remote code execution flaw in the EDK II PXE network stack (CVSS 9.5). The flaw lets an attacker on the network exploit the PXE boot path before the operating system loads. Update and re-provision: dnf update edk2 and rebuild any PXE boot images from the patched firmware.

Critical 9.5 CVSS 2026-11-10

AlmaLinux 10

SharedLicense लाइसेंस के तहत इसका अर्थ

Pre-boot execution means the compromise happens before the OS and all its defenses load — a network-adjacent attacker can pivot straight into the firmware layer, which survives OS reinstalls.

Type:

security

Severity:

critical

Release date:

2026-11-10

Description:

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	edk2-tools-20251114-5.el10_2.3.alma.1.aarch64.rpm	16db10d92bc10675323ad3c76e607853a26bfdb1bd0da9ca6ff7a2a465410de2
noarch	edk2-aarch64-20251114-5.el10_2.3.alma.1.noarch.rpm	ae015f7b36ccf5b1416efe1b966ecac74b8befed2289b62c3a1510924db7ad75
noarch	edk2-ovmf-20251114-5.el10_2.3.alma.1.noarch.rpm	b2a18bf00300eaeca141ef0988cc1a12129a68b9e7219a07a6183a2fe2251fb3
noarch	edk2-tools-doc-20251114-5.el10_2.3.alma.1.noarch.rpm	d0b002d96fd5855e077a39827c1a0b1c51422ad1faca626b7cc5284cae89ef4b
x86_64	edk2-tools-20251114-5.el10_2.3.alma.1.x86_64.rpm	01087afee2faa83271cd8343a7d03cac4154ec824fa0425f6f458a38ca266e11
x86_64_v2	edk2-tools-20251114-5.el10_2.3.alma.1.x86_64_v2.rpm	62098b3b4fa5db60bf9221d74320f3d633ae7714900ef305f21e24c2527117c2

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

अक्सर पूछे जाने वाले प्रश्न

What is CVE-2026-97631?

It is a pre-boot remote code execution flaw in the EDK II PXE network stack, shipped as the 64-bit UEFI firmware for QEMU and KVM in the edk2 packages. CVSS 9.5; fixed in the AlmaLinux 10 update ALSA-2026:96240 (released November 10, 2026).

Who is affected?

AlmaLinux 10 hosts using PXE network boot with the edk2 firmware package — virtualization hosts provisioning VMs over the network are the primary exposure.

How do I apply the fix?

Run dnf update edk2 and regenerate any PXE boot images built from the package so the patched firmware is what network boots load.

Why does pre-boot execution matter so much?

Code running before the OS bypasses every OS-level defense — patching, EDR agents and hardening all load after the firmware, so a firmware implant persists across OS reinstalls.

संदर्भ

सुरक्षा सलाह

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें

अक्सर पूछे जाने वाले प्रश्न

संबंधित सलाह

अपने सिस्टम में भेद्यताओं की जाँच करें