vulnerability

Ubuntu: USN-7894-1 (CVE-2025-2295): EDK II vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:M/C:N/I:P/A:P)	Mar 14, 2025	Nov 27, 2025	Nov 28, 2025

Severity

CVSS

(AV:N/AC:M/Au:M/C:N/I:P/A:P)

Published

Mar 14, 2025

Added

Nov 27, 2025

Modified

Nov 28, 2025

Description

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

Solutions

ubuntu-upgrade-ovmfubuntu-upgrade-ovmf-ia32ubuntu-upgrade-qemu-efiubuntu-upgrade-qemu-efi-aarch64ubuntu-upgrade-qemu-efi-armubuntu-upgrade-qemu-efi-loongarch64ubuntu-upgrade-qemu-efi-riscv64

References

CVE-2025-2295
https://attackerkb.com/topics/CVE-2025-2295
CWE-190
UBUNTU-USN-7894-1
URL-https://github.com/tianocore/edk2/security/advisories/GHSA-8522-69fh-w74x
URL-https://ubuntu.com/security/notices/USN-7894-1
URL-https://www.cve.org/CVERecord?id=CVE-2025-2295

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today