vulnerability

Ubuntu: USN-7894-1 (CVE-2025-3770): EDK II vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:L/AC:M/Au:S/C:C/I:C/A:C)	Aug 7, 2025	Oct 30, 2025	Nov 28, 2025

Severity

CVSS

(AV:L/AC:M/Au:S/C:C/I:C/A:C)

Published

Aug 7, 2025

Added

Oct 30, 2025

Modified

Nov 28, 2025

Description

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

Solutions

ubuntu-upgrade-ovmfubuntu-upgrade-ovmf-ia32ubuntu-upgrade-qemu-efiubuntu-upgrade-qemu-efi-aarch64ubuntu-upgrade-qemu-efi-armubuntu-upgrade-qemu-efi-loongarch64ubuntu-upgrade-qemu-efi-riscv64

References

CVE-2025-3770
https://attackerkb.com/topics/CVE-2025-3770
CWE-693
UBUNTU-USN-7894-1
URL-https://github.com/tianocore/edk2/security/advisories/GHSA-vx5v-4gg6-6qxr
URL-https://ubuntu.com/security/notices/USN-7894-1
URL-https://www.cve.org/CVERecord?id=CVE-2025-3770

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today