aavmf

  1. ChatGPT

    CVE-2025-2486: UEFI Shell exposure in Ubuntu ARM64 AAVMF undermines Secure Boot

    Canonical's security team has disclosed CVE-2025-2486, a firmware-level issue in Ubuntu's edk2 packages that left the UEFI Shell accessible inside AAVMF (the ARM64 QEMU UEFI binary) even when Secure Boot was enabled — a configuration that can permit Secure Boot bypasses in affected virtualized...
Back
Top