Integer overflow in edk2 - CVE-2024-38796

Vulnerability identifier: #VU97766

CSH Severity: Medium

CVSS v4 BT: 4.8 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-38796

CWE-ID: CWE-190

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in PeCoffLoaderRelocateImage. A remote user on the local network can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

edk2
PowerEdge T160
PowerEdge R660xs
PowerEdge R760xs
PowerEdge R760xd2
PowerEdge T560
PowerEdge R760xa
PowerEdge XE9680
PowerEdge XR5610
PowerEdge XR8610t
PowerEdge XR8620t
PowerEdge XR7620
PowerEdge XE8640
PowerEdge XE9640
PowerEdge HS5620
PowerEdge T360
PowerEdge R260
PowerEdge R360
DSS 8440
PowerEdge XE2420
PowerEdge XE7420
PowerEdge XE7440
Dell XC Core XC660
Dell XC Core XC760
Dell XC Core XC660xs
Dell XC Core XC760xa
PowerEdge HS5610
PowerEdge R660
PowerEdge R760
PowerEdge MX760c
PowerEdge R860
PowerEdge R960
PowerEdge C6620
Alienware Aurora R12
OptiPlex 5400 All-In-One
OptiPlex 7400 All-In-One
Pro Rugged 14 RB14250
Pro Rugged 13 RA13250
PowerEdge C6615
Latitude 7350 Detachable
Alienware m16 R2
Inspiron 16 7640 2-in-1
Inspiron 16 5645
Inspiron 16 5640
Vostro 16 5640
Alienware x16 R2
Precision 3280 CFF
Precision 5690
Vostro 14 3440
Inspiron 14 5440
Inspiron 14 7440 2-in-1
Latitude 3450
Latitude 3550
PowerEdge R250
PowerEdge R350
Latitude 9450
PowerEdge T350
PowerEdge T150
XC Core XC7625
PowerEdge R7625
PowerEdge R6625
PowerEdge R7615
PowerEdge R6615
Precision 5490
XPS 16 9640
Precision 3680 Tower
Alienware M18 R2
Dell G15 5535
Latitude 5350
Latitude 7350
XPS 14 9440
Latitude 7450
Latitude 7650
Precision 3591
Inspiron 3030
Vostro 3030
Vostro 3030S
Inspiron 16 Plus 7640
Inspiron 3030S
Inspiron 14 Plus 7440
Latitude 5550
Precision 3590
Precision 3490
Latitude 5450
OptiPlex AIO 7420
Precision Tower 7865
Alienware m18
Alienware m16 R1 AMD
PowerEdge R750
Dell EMC XC Core XC450
Dell EMC XC Core XC750xa
Dell EMC XC Core XC650
Dell EMC XC Core XC750
PowerEdge R550
Dell EMC XC Core XC6520
PowerEdge R750XA
PowerEdge C6520
PowerEdge MX750c
PowerEdge R450
PowerEdge R650
PowerEdge R650XS
PowerEdge R750XS
PowerEdge T550
PowerEdge XR11
PowerEdge XR12
Inspiron 27 7720 All-in-One
Inspiron 24 5420 All-in-One
PowerEdge XR4520c
PowerEdge XR4510c
XPS 17 9730
Latitude 9440 2-in-1
Precision 5680
Precision 5480
PowerEdge T40
Inspiron 16 Plus 7630
Latitude 5540
Inspiron 16 7630 2-in-1
XPS 15 9530
Vostro 14 3435
Inspiron 16 5630
Inspiron 15 3535
Vostro 15 3535
Inspiron 14 Plus 7430
Inspiron 14 7430 2-in-1
Latitude 3340
Latitude 3440
Latitude 3540
Inspiron 14 5430
Precision 3581
Precision 3580
Vostro 16 5630
Latitude 5340
Precision 7680
Precision 7780
Latitude 7340
Alienware x14 R2
Alienware x16 R1
Inspiron 13 5330
Edge Gateway 3000 series
Latitude 7440
Latitude 5440
Latitude 7640
Precision 3480
Latitude 3140
Latitude 3140 2in1
Latitude 7230 Rugged Extreme
Inspiron 3020 Desktop
Inspiron 3020 Small Desktop
OptiPlex All-in-One 7410
Vostro 3020 Tower Desktop
Vostro 3020 Small Desktop
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
ChengMing 3910/3911
Alienware x14
Vostro 5320
Inspiron 13 5320
Alienware m18 R1
Alienware x15 R2
Alienware m16 R1
Alienware x17 R2
OptiPlex 3000 Thin Client
Inspiron 5415
Inspiron 5410 All-In-One
Inspiron 5515
Inspiron 7710 All-in-One
Vostro 5620
Alienware m15 R4
Latitude 5310
Latitude 5310 2-IN-1
Alienware m17 R4
Vostro 5515
XPS 13 9315
Inspiron 7415 2-in-1
Alienware x15 R1
Inspiron 16 5620
Vostro 5415
Alienware x17 R1
Inspiron 14 5420
Latitude 9330
XPS 13 9305
Vostro 7620
Latitude 5430
Precision 7670
Inspiron 16 Plus 7620
Inspiron 14 Plus 7420
Precision 7770
Inspiron 3910
Vostro 3710
Precision 3470
OptiPlex XE4 Tower
Precision 3571
OptiPlex XE4 SFF
Precision 5470
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
Latitude 5431
Vostro 3910
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
ChengMing 3900
OptiPlex 5080
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
Latitude 5531
Precision 5570
Latitude 7330
Latitude 7530
Latitude 7430
XPS 15 9520
Latitude 9430
Dell G15 5520
Precision 5770
Dell G16 7620
Alienware m17 R3
Alienware m15 R7
Alienware Area 51m R2
XPS 17 9720
Latitude 3180
Latitude 3189
ChengMing 3990
Vostro 3690
Inspiron 3891
Precision 3440
Vostro 3890
Latitude 3300
Vostro 5880
ChengMing 3991
OptiPlex 7080
Precision 5760
Latitude 3120
XPS 17 9710
Latitude 3410
Latitude 3510
Precision 5550
Latitude 9510 2in1
Precision 5750
XPS 15 9500
Latitude 7330 Rugged Laptop
Latitude 5430 Rugged Laptop
XPS 17 9700
XPS 15 7590
Inspiron 7700 All-In-One
Inspiron 5401 AIO
OptiPlex 5270 All-In-One
Inspiron 5400/5401
Latitude 9410
Latitude 5411
OptiPlex 7470 All-In-One
OptiPlex 7770 All-In-One
Precision 5540
Precision 3551
Latitude 5511
Latitude 3390 2-in-1
Precision 5530 2-in-1
Precision 3561
Vostro 3401
Inspiron 3501
Latitude 7210 2-in-1
Vostro 3400
XPS 15 9510
OptiPlex 3280 All-in-One
Latitude 5521
Vostro 3501
Precision 5560
Vostro 3500
Precision 7750
Precision 3640
OptiPlex 5480 All-In-One
OptiPlex 5490 All-In-One
Precision 3540
OptiPlex 7480 All-in-One
OptiPlex 7490 All-in-One
Precision 3530
OptiPlex 7780 All-in-One
Precision 7550
Latitude 5421
Latitude 7410
Latitude 5500
Latitude 7310
Latitude 9420
Latitude 5400
Latitude 3190 2-In-1
Latitude 5401
Precision 3650 Tower
Latitude 7300
Latitude 7400
Precision 3541
Latitude 7320 Detachable
Latitude 5290 2-in-1
Latitude 5501
Precision 7760
Precision 7560
Latitude 3190
Latitude 9520
Latitude 5590
Latitude 5490
Latitude 7390 2-in-1
Latitude 5290
Precision 7540
Precision 7740
Precision 7520
Precision 7720
Precision 7530
Precision 7730
Latitude 7520
Latitude 7320
Latitude 7420
Latitude 7480
Latitude 7490
Latitude 7390
Latitude 7290
Latitude 7220 Rugged Extreme
Latitude Rugged 7220EX
Latitude 5420
Compute Scale-up Server 3200
Latitude 7212 Rugged Extreme Tablet
Superdome Flex 280 Server
Precision 5860 XL Tower
Precision 5860 Tower
Precision 7960 XL Tower
Precision 7960 Tower
PowerEdge R340
PowerEdge R240
PowerEdge T340
PowerEdge T140
Dell EMC NX440
Dell EMC XC Core XC7525
XPS 9320
XPS 13 Plus 9320
Precision 7920 Rack
PowerEdge R740XD2
PowerEdge XR2
Precision 7920 XL Rack
Dell EMC XC Core 6420 System
PowerEdge T440
PowerEdge R440
PowerEdge R540
PowerEdge R940
PowerEdge R640
PowerEdge R740XD
PowerEdge R740
PowerEdge R940XA
OptiPlex 3090
Dell EMC XC Core XCXR2
Dell EMC XC Core XC940 System
Dell EMC XC Core XC740xd2
Dell EMC XC Core XC740xd System
Dell EMC XC Core XC640 System
Dell EMC Storage NX3340
Dell EMC Storage NX3240
Precision 3660
PowerEdge C4140
PowerEdge R840
PowerEdge MX840C
PowerEdge MX740C
PowerEdge M640 (for PE VRTX)
PowerEdge M640
PowerEdge FC640
PowerEdge T640
PowerEdge C6420
XPS 8940
OptiPlex 3080
XPS 13 9310 2-in-1
Vostro 3881
Vostro 3888
Vostro 3681
Dell Precision 3630 Tower
Precision 3930 Rack
Dell Precision 5820 Tower
Dell Precision 7820 Tower
Dell Precision 7920 Tower
XPS 13 9310
Superdome Flex Server
PowerEdge R6415
PowerEdge R7425
PowerEdge R7415
PowerEdge XE8545
PowerEdge R6525
PowerEdge R7515
PowerEdge R7525
PowerEdge C6525
PowerEdge R6515
APEX Cloud Platform for Red Hat OpenShift
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
openEuler
Ubuntu
Dell Data Lakehouse
APEX Cloud Platform for Microsoft Azure
Embedded Box PC 3000
Embedded Box PC 5000
Precision 3240 Compact
OptiPlex XE3
Red Hat OpenShift Container Platform
edk2 (Ubuntu package)
edk2
edk2-debuginfo
edk2-debugsource
edk2-devel
edk2-aarch64
python3-edk2-devel
edk2-ovmf
edk2-help
edk2 (Red Hat package)
edk2-tools-doc

Install update from vendor's website.

edk2 - update to edk2-stable202408.01
Alienware Aurora R12 - update to 1.1.29
OptiPlex 5400 All-In-One - update to 1.1.47
OptiPlex 7400 All-In-One - update to 1.1.47
Dell Data Lakehouse - update to 1.4.0.0
Pro Rugged 14 RB14250 - update to 1.4.0
Pro Rugged 13 RA13250 - update to 1.4.0
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
PowerEdge C6615 - update to 1.6.2
Latitude 7350 Detachable - update to 1.10.0
Alienware m16 R2 - update to 1.10.0
Inspiron 16 7640 2-in-1 - update to 1.10.0
Inspiron 16 5645 - update to 1.10.0
Inspiron 16 5640 - update to 1.10.0
Vostro 16 5640 - update to 1.10.0
Alienware x16 R2 - update to 1.10.0
Precision 3280 CFF - update to 1.11.0
Precision 5690 - update to 1.11.0
Vostro 14 3440 - update to 1.11.0
Inspiron 14 5440 - update to 1.11.0
Inspiron 14 7440 2-in-1 - update to 1.11.0
Latitude 3450 - update to 1.11.0
Latitude 3550 - update to 1.11.0
PowerEdge R250 - update to 1.11.1
PowerEdge R350 - update to 1.11.1
Latitude 9450 - update to 1.11.1
PowerEdge T350 - update to 1.11.1
PowerEdge T150 - update to 1.11.1
XC Core XC7625 - update to 1.11.2
PowerEdge R7625 - update to 1.11.2
PowerEdge R6625 - update to 1.11.2
PowerEdge R7615 - update to 1.11.2
PowerEdge R6615 - update to 1.11.2
Precision 5490 - update to 1.11.3
XPS 16 9640 - update to 1.12.0
Precision 3680 Tower - update to 1.12.0
Alienware M18 R2 - update to 1.12.0
Dell G15 5535 - update to 1.12.0
Latitude 5350 - update to 1.12.0
Latitude 7350 - update to 1.12.0
XPS 14 9440 - update to 1.12.1
Latitude 7450 - update to 1.12.3
Latitude 7650 - update to 1.12.3
Precision 3591 - update to 1.13.0
Inspiron 3030 - update to 1.13.0
Vostro 3030 - update to 1.13.0
Vostro 3030S - update to 1.13.0
Inspiron 16 Plus 7640 - update to 1.13.0
Inspiron 3030S - update to 1.13.0
Inspiron 14 Plus 7440 - update to 1.13.0
Latitude 5550 - update to 1.13.0
Precision 3590 - update to 1.13.0
Precision 3490 - update to 1.13.1
Latitude 5450 - update to 1.13.1
OptiPlex AIO 7420 - update to 1.13.2
Precision Tower 7865 - update to 1.16.0
Alienware m18 - update to 1.16.0
Alienware m16 R1 AMD - update to 1.16.0
PowerEdge R750 - update to 1.16.2
Dell EMC XC Core XC450 - update to 1.16.2
Dell EMC XC Core XC750xa - update to 1.16.2
Dell EMC XC Core XC650 - update to 1.16.2
Dell EMC XC Core XC750 - update to 1.16.2
PowerEdge R550 - update to 1.16.2
Dell EMC XC Core XC6520 - update to 1.16.2
PowerEdge R750XA - update to 1.16.2
PowerEdge C6520 - update to 1.16.2
PowerEdge MX750c - update to 1.16.2
PowerEdge R450 - update to 1.16.2
PowerEdge R650 - update to 1.16.2
PowerEdge R650XS - update to 1.16.2
PowerEdge R750XS - update to 1.16.2
PowerEdge T550 - update to 1.16.2
PowerEdge XR11 - update to 1.16.2
PowerEdge XR12 - update to 1.16.2
Inspiron 27 7720 All-in-One - update to 1.17.0
Inspiron 24 5420 All-in-One - update to 1.17.0
PowerEdge XR4520c - update to 1.17.3
PowerEdge XR4510c - update to 1.17.3
XPS 17 9730 - update to 1.18.0
Latitude 9440 2-in-1 - update to 1.18.0
Precision 5680 - update to 1.18.0
Precision 5480 - update to 1.18.1
PowerEdge T40 - update to 1.19.0
Inspiron 16 Plus 7630 - update to 1.20.0
Latitude 5540 - update to 1.20.0
Inspiron 16 7630 2-in-1 - update to 1.20.0
XPS 15 9530 - update to 1.20.0
Vostro 14 3435 - update to 1.20.0
Inspiron 16 5630 - update to 1.20.0
Inspiron 15 3535 - update to 1.20.0
Vostro 15 3535 - update to 1.20.0
Inspiron 14 Plus 7430 - update to 1.20.0
Inspiron 14 7430 2-in-1 - update to 1.20.0
Latitude 3340 - update to 1.20.0
Latitude 3440 - update to 1.20.0
Latitude 3540 - update to 1.20.0
Inspiron 14 5430 - update to 1.20.0
Precision 3581 - update to 1.20.0
Precision 3580 - update to 1.20.0
Vostro 16 5630 - update to 1.20.0
Latitude 5340 - update to 1.20.0
Precision 7680 - update to 1.20.1
Precision 7780 - update to 1.20.1
Latitude 7340 - update to 1.21.0
Alienware x14 R2 - update to 1.21.0
Alienware x16 R1 - update to 1.21.0
Inspiron 13 5330 - update to 1.21.0
Edge Gateway 3000 series - update to 1.21.0
Latitude 7440 - update to 1.21.2
Latitude 5440 - update to 1.21.2
Latitude 7640 - update to 1.21.2
Precision 3480 - update to 1.21.2
Latitude 3140 - update to 1.22.1
Latitude 3140 2in1 - update to 1.22.1
Latitude 7230 Rugged Extreme - update to 1.23.0
Inspiron 3020 Desktop - update to 1.23.0
Inspiron 3020 Small Desktop - update to 1.23.0
OptiPlex All-in-One 7410 - update to 1.23.0
Vostro 3020 Tower Desktop - update to 1.23.0
Vostro 3020 Small Desktop - update to 1.23.0
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010 - update to 1.23.0
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010 - update to 1.23.0
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010 - update to 1.23.0
ChengMing 3910/3911 - update to 1.23.0
Alienware x14 - update to 1.24.0
Vostro 5320 - update to 1.24.0
Inspiron 13 5320 - update to 1.24.0
Alienware m18 R1 - update to 1.25.0
Alienware x15 R2 - update to 1.25.0
Alienware m16 R1 - update to 1.25.0
Alienware x17 R2 - update to 1.25.0
OptiPlex 3000 Thin Client - update to 1.25.0
Inspiron 5415 - update to 1.27.0
Inspiron 5410 All-In-One - update to 1.27.0
Inspiron 5515 - update to 1.27.0
Inspiron 7710 All-in-One - update to 1.27.0
Vostro 5620 - update to 1.27.0
Alienware m15 R4 - update to 1.27.0
Latitude 5310 - update to 1.27.0
Latitude 5310 2-IN-1 - update to 1.27.0
Alienware m17 R4 - update to 1.27.0
Vostro 5515 - update to 1.27.0
XPS 13 9315 - update to 1.27.0
Inspiron 7415 2-in-1 - update to 1.27.0
Alienware x15 R1 - update to 1.27.0
Inspiron 16 5620 - update to 1.27.0
Vostro 5415 - update to 1.27.0
Embedded Box PC 3000 - update to 1.27.0
Alienware x17 R1 - update to 1.27.0
Inspiron 14 5420 - update to 1.27.0
Latitude 9330 - update to 1.27.1
XPS 13 9305 - update to 1.28.0
Vostro 7620 - update to 1.28.0
Latitude 5430 - update to 1.28.0
Embedded Box PC 5000 - update to 1.28.0
Precision 7670 - update to 1.28.0
Inspiron 16 Plus 7620 - update to 1.28.0
Inspiron 14 Plus 7420 - update to 1.28.0
Precision 7770 - update to 1.28.0
Inspiron 3910 - update to 1.29.0
Vostro 3710 - update to 1.29.0
Precision 3470 - update to 1.29.0
OptiPlex XE4 Tower - update to 1.29.0
Precision 3571 - update to 1.29.0
OptiPlex XE4 SFF - update to 1.29.0
Precision 5470 - update to 1.29.0
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower - update to 1.29.0
Latitude 5431 - update to 1.29.0
Vostro 3910 - update to 1.29.0
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower - update to 1.29.0
ChengMing 3900 - update to 1.29.0
OptiPlex 5080 - update to 1.29.0
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro - update to 1.29.0
Latitude 5531 - update to 1.29.0
Precision 5570 - update to 1.30.0
Latitude 7330 - update to 1.30.0
Latitude 7530 - update to 1.30.0
Latitude 7430 - update to 1.30.0
XPS 15 9520 - update to 1.30.0
Latitude 9430 - update to 1.30.0
Dell G15 5520 - update to 1.31.0
Precision 5770 - update to 1.31.0
Dell G16 7620 - update to 1.31.0
Alienware m17 R3 - update to 1.31.0
Alienware m15 R7 - update to 1.31.0
Alienware Area 51m R2 - update to 1.31.0
XPS 17 9720 - update to 1.31.0
Latitude 3180 - update to 1.31.0
Latitude 3189 - update to 1.31.0
ChengMing 3990 - update to 1.32.0
Vostro 3690 - update to 1.32.0
Inspiron 3891 - update to 1.32.0
Precision 3440 - update to 1.32.0
Vostro 3890 - update to 1.32.0
Latitude 3300 - update to 1.32.0
Vostro 5880 - update to 1.32.0
ChengMing 3991 - update to 1.32.0
OptiPlex 7080 - update to 1.32.0
Precision 5760 - update to 1.33.0
Latitude 3120 - update to 1.33.0
XPS 17 9710 - update to 1.33.0
Latitude 3410 - update to 1.33.0
Latitude 3510 - update to 1.33.0
Precision 3240 Compact - update to 1.33.0
Precision 5550 - update to 1.34.0
Latitude 9510 2in1 - update to 1.34.0
Precision 5750 - update to 1.34.0
XPS 15 9500 - update to 1.34.0
Latitude 7330 Rugged Laptop - update to 1.34.0
Latitude 5430 Rugged Laptop - update to 1.34.0
XPS 17 9700 - update to 1.34.0
XPS 15 7590 - update to 1.35.0
Inspiron 7700 All-In-One - update to 1.35.0
Inspiron 5401 AIO - update to 1.35.0
OptiPlex 5270 All-In-One - update to 1.35.0
Inspiron 5400/5401 - update to 1.35.0
Latitude 9410 - update to 1.35.0
Latitude 5411 - update to 1.35.0
OptiPlex 7470 All-In-One - update to 1.35.0
OptiPlex 7770 All-In-One - update to 1.35.0
OptiPlex XE3 - update to 1.35.0
Precision 5540 - update to 1.35.0
Precision 3551 - update to 1.35.0
Latitude 5511 - update to 1.35.0
Latitude 3390 2-in-1 - update to 1.35.1
Precision 5530 2-in-1 - update to 1.35.8
Precision 3561 - update to 1.36.0
Vostro 3401 - update to 1.36.0
Inspiron 3501 - update to 1.36.0
Latitude 7210 2-in-1 - update to 1.36.0
Vostro 3400 - update to 1.36.0
XPS 15 9510 - update to 1.36.0
OptiPlex 3280 All-in-One - update to 1.36.0
Latitude 5521 - update to 1.36.0
Vostro 3501 - update to 1.36.0
Precision 5560 - update to 1.36.0
Vostro 3500 - update to 1.36.0
Precision 7750 - update to 1.37.0
Precision 3640 - update to 1.37.0
OptiPlex 5480 All-In-One - update to 1.37.0
OptiPlex 5490 All-In-One - update to 1.37.0
Precision 3540 - update to 1.37.0
OptiPlex 7480 All-in-One - update to 1.37.0
OptiPlex 7490 All-in-One - update to 1.37.0
Precision 3530 - update to 1.37.0
OptiPlex 7780 All-in-One - update to 1.37.0
Precision 7550 - update to 1.37.0
Latitude 5421 - update to 1.37.0
Latitude 7410 - update to 1.37.0
Latitude 5500 - update to 1.37.0
Latitude 7310 - update to 1.37.0
Latitude 9420 - update to 1.37.0
Latitude 5400 - update to 1.37.0
Latitude 3190 2-In-1 - update to 1.38.0
Latitude 5401 - update to 1.38.0
Precision 3650 Tower - update to 1.38.0
Latitude 7300 - update to 1.38.0
Latitude 7400 - update to 1.38.0
Precision 3541 - update to 1.38.0
Latitude 7320 Detachable - update to 1.38.0
Latitude 5290 2-in-1 - update to 1.38.0
Latitude 5501 - update to 1.38.0
Precision 7760 - update to 1.38.0
Precision 7560 - update to 1.38.0
Latitude 3190 - update to 1.38.0
Latitude 9520 - update to 1.38.1
Latitude 5590 - update to 1.39.0
Latitude 5490 - update to 1.39.0
Latitude 7390 2-in-1 - update to 1.39.0
Latitude 5290 - update to 1.39.0
Precision 7540 - update to 1.39.1
Precision 7740 - update to 1.39.1
Precision 7520 - update to 1.40.0
Precision 7720 - update to 1.40.0
Precision 7530 - update to 1.40.1
Precision 7730 - update to 1.40.1
Latitude 7520 - update to 1.41.0
Latitude 7320 - update to 1.41.0
Latitude 7420 - update to 1.41.0
Latitude 7480 - update to 1.41.3
Latitude 7490 - update to 1.42.0
Latitude 7390 - update to 1.42.0
Latitude 7290 - update to 1.42.0
Latitude 7220 Rugged Extreme - update to 1.43.0
Latitude Rugged 7220EX - update to 1.43.0
Latitude 5420 - update to 1.44.0
Compute Scale-up Server 3200 - update to 1.50.120
Latitude 7212 Rugged Extreme Tablet - update to 1.54.0
Superdome Flex 280 Server - update to 2.00.12
Precision 5860 XL Tower - update to 2.9.0
Precision 5860 Tower - update to 2.9.0
Precision 7960 XL Tower - update to 2.9.0
Precision 7960 Tower - update to 2.9.0
PowerEdge XE8545 - update to 2.17.1
PowerEdge R340 - update to 2.18.0
PowerEdge R240 - update to 2.18.0
PowerEdge T340 - update to 2.18.0
PowerEdge T140 - update to 2.18.0
Dell EMC NX440 - update to 2.18.0
PowerEdge R6525 - update to 2.18.1
PowerEdge R7515 - update to 2.18.1
PowerEdge R7525 - update to 2.18.1
PowerEdge C6525 - update to 2.18.1
PowerEdge R6515 - update to 2.18.1
Dell EMC XC Core XC7525 - update to 2.18.1
XPS 9320 - update to 2.19.0
XPS 13 Plus 9320 - update to 2.19.0
Precision 7920 Rack - update to 2.23.0
PowerEdge R740XD2 - update to 2.23.0
PowerEdge XR2 - update to 2.23.0
Precision 7920 XL Rack - update to 2.23.0
Dell EMC XC Core 6420 System - update to 2.23.0
PowerEdge T440 - update to 2.23.0
PowerEdge R440 - update to 2.23.0
PowerEdge R540 - update to 2.23.0
PowerEdge R940 - update to 2.23.0
PowerEdge R640 - update to 2.23.0
PowerEdge R740XD - update to 2.23.0
PowerEdge R740 - update to 2.23.0
PowerEdge R940XA - update to 2.23.0
OptiPlex 3090 - update to 2.23.0
Dell EMC XC Core XCXR2 - update to 2.23.0
Dell EMC XC Core XC940 System - update to 2.23.0
Dell EMC XC Core XC740xd2 - update to 2.23.0
Dell EMC XC Core XC740xd System - update to 2.23.0
Dell EMC XC Core XC640 System - update to 2.23.0
Dell EMC Storage NX3340 - update to 2.23.0
Dell EMC Storage NX3240 - update to 2.23.0
Precision 3660 - update to 2.23.0
PowerEdge C4140 - update to 2.23.0
PowerEdge R840 - update to 2.23.0
PowerEdge MX840C - update to 2.23.0
PowerEdge MX740C - update to 2.23.0
PowerEdge M640 (for PE VRTX) - update to 2.23.0
PowerEdge M640 - update to 2.23.0
PowerEdge FC640 - update to 2.23.0
PowerEdge T640 - update to 2.23.0
PowerEdge C6420 - update to 2.23.0
XPS 8940 - update to 2.26.0
OptiPlex 3080 - update to 2.29.0
XPS 13 9310 2-in-1 - update to 2.31.0
Vostro 3881 - update to 2.32.0
Vostro 3888 - update to 2.32.0
Vostro 3681 - update to 2.32.0
Dell Precision 3630 Tower - update to 2.32.0
Precision 3930 Rack - update to 2.35.0
Dell Precision 5820 Tower - update to 2.41.0
Dell Precision 7820 Tower - update to 2.45.0
Dell Precision 7920 Tower - update to 2.45.0
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
XPS 13 9310 - update to 3.29.0
Superdome Flex Server - update to 4.5.6
Red Hat OpenShift Container Platform - addressed in versions 4.13.54, 4.14.42, 4.15.39, 4.16.24
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2
edk2 - update to 202011-21
edk2-debuginfo - update to 202011-21
edk2-debugsource - update to 202011-21
edk2-devel - update to 202011-21
edk2-aarch64 - update to 202011-21
python3-edk2-devel - update to 202011-21
edk2-ovmf - update to 202011-21
edk2-help - update to 202011-21
edk2 (Red Hat package) - addressed in versions 20190829git37eef91017ad-9.el8_2.6, 20200602gitca407c7246bf-4.el8_4.7, 20220126gitbb1bba3d77-2.el8_6.7, 20220126gitbb1bba3d77-3.el9_0.6, 20220126gitbb1bba3d77-4.el8_8.7, 20220126gitbb1bba3d77-13.el8_10.4, 20221207gitfff6d81270b5-9.el9_2.5, 20231122-6.el9_4.6, 20240524-6.el9_5.3
edk2-tools-doc - update to 20220126gitbb1bba3d77-13.0.1
edk2-aarch64 - update to 20220126gitbb1bba3d77-13.0.1
edk2-ovmf - update to 20220126gitbb1bba3d77-13.0.1

• https://github.com/tianocore/edk2/security/advisories/GHSA-xpcr-7hjq-m6qm
• https://github.com/tianocore/edk2/pull/6249

• Remote code execution in edk2
• openEuler update for edk2
• Red Hat Enterprise Linux 9 update for edk2
• Red Hat Enterprise Linux 8 update for edk2
• Red Hat Enterprise Linux 9 update for edk2
• Red Hat Enterprise Linux 9 update for edk2
• Red Hat Enterprise Linux 8 update for edk2
• Red Hat Enterprise Linux 8 update for edk2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Red Hat Enterprise Linux 8 update for edk2
• Red Hat Enterprise Linux 8 update for the edk2:20220126gitbb1bba3d77 module
• Red Hat Enterprise Linux 9 update for the edk2:20240524 module
• Anolis OS update for edk2
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell PowerEdge Server BIOS update for Tianocore EDK2
• Dell Client Platform update for EDK2
• Dell Precision Rack BIOS update for Tianocore EDK2
• Dell Data Lakehouse update for third-party components
• Integer overflow in HPE Superdome Flex, Superdome Flex 280, and Compute Scale-up Server 3200
• Dell PowerEdge T40 Mini Tower Server update for EDK2
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Ubuntu update for edk2
• Ubuntu update for edk2