GeneralBreaking NewsBreakingLatest News
Critical EDK2 Flaw Puts Millions of Servers at Risk of Hacking
Sentiment: NeutralHigh Priority
What Happened?
A critical vulnerability in TianoCore EDK II, affecting millions of servers, has been discovered. The flaw, tracked as CVE-2026-97631, allows hackers to run malicious code before servers boot up.
Key points
- The flaw is a memory corruption issue with a severity score of 9.5 out of 10.
- It may affect servers in data centers and enterprises that boot over a network.
- Discovered by Alex Matrosov from Anthropic and Dan Holmes-Mitra from Google.
- Public advisory issued after AMI detailed the vulnerability and provided a fix.
- The flaw does not affect users who boot solely from disk drives.
Key insights
- The flaw's discovery highlights ongoing cybersecurity challenges in widely used firmware.
- Hackers may exploit the vulnerability before vendors can distribute firmware updates.
- The incident follows other significant vulnerabilities in UEFI-related systems.
Why it matters
The vulnerability could expose millions of servers to potential hacking risks, affecting critical infrastructure.
Source
India Today
