vulnerability

Ubuntu: USN-7894-1 (CVE-2024-38805): EDK II vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:A/AC:L/Au:S/C:N/I:P/A:C)	Aug 12, 2025	Oct 30, 2025	Nov 28, 2025

Severity

CVSS

(AV:A/AC:L/Au:S/C:N/I:P/A:C)

Published

Aug 12, 2025

Added

Oct 30, 2025

Modified

Nov 28, 2025

Description

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

Solutions

ubuntu-upgrade-ovmfubuntu-upgrade-ovmf-ia32ubuntu-upgrade-qemu-efiubuntu-upgrade-qemu-efi-aarch64ubuntu-upgrade-qemu-efi-armubuntu-upgrade-qemu-efi-loongarch64ubuntu-upgrade-qemu-efi-riscv64

References

CVE-2024-38805
https://attackerkb.com/topics/CVE-2024-38805
CWE-190
UBUNTU-USN-7894-1
URL-https://github.com/tianocore/edk2/security/advisories/GHSA-p7wp-52j7-6r5x
URL-https://ubuntu.com/security/notices/USN-7894-1
URL-https://www.cve.org/CVERecord?id=CVE-2024-38805

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today