When Secure Boot is supposed to be the safety net that stops unsigned code from running before the operating system, a small logic shortcut in the firmware can erase that protection — and that is precisely what the newly published CVE-2025-2296 describes: an EDK2/OvmfPkg flaw that can let a...