CVE-2025-2296 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-2296 Interim 1 2 2026-03-05T01:33:58Z current 2025-12-23T00:54:20Z 2026-03-05T01:33:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-2296 EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 ovmf ovmf-tools qemu-ovmf-ia32 qemu-ovmf-x86_64 qemu-ovmf-x86_64-debug qemu-uefi-aarch32 qemu-uefi-aarch64 ovmf as a component of SLES-LTSS-TERADATA 15 SP2 ovmf as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ovmf-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ovmf as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ovmf-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ovmf as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ovmf-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ovmf as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ovmf-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Micro 5.2 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Micro 5.2 ovmf as a component of SUSE Linux Enterprise Micro 5.2 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Micro 5.3 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Micro 5.3 ovmf as a component of SUSE Linux Enterprise Micro 5.3 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Micro 5.4 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Micro 5.4 ovmf as a component of SUSE Linux Enterprise Micro 5.4 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Micro 5.5 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Micro 5.5 ovmf as a component of SUSE Linux Enterprise Micro 5.5 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ovmf-x86_64-debug as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-uefi-aarch32 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ovmf as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-ovmf-x86_64-debug as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-uefi-aarch32 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 ovmf as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 ovmf as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 ovmf-tools as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 ovmf as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 ovmf-tools as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 ovmf as a component of SUSE Linux Enterprise Server 12 SP2-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS ovmf as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ovmf as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 12 SP5-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ovmf as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security ovmf as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ovmf as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ovmf as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP3-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ovmf as a component of SUSE Linux Enterprise Server 15 SP4-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP4-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS ovmf as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP5-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ovmf as a component of SUSE Linux Enterprise Server 15 SP6-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15 SP6-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS ovmf as a component of SUSE Linux Enterprise Server 15-LTSS ovmf-tools as a component of SUSE Linux Enterprise Server 15-LTSS qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server 15-LTSS qemu-uefi-aarch64 as a component of SUSE Linux Enterprise Server 15-LTSS ovmf as a component of SUSE Linux Enterprise Server Teradata 12 SP3 ovmf as a component of SUSE Linux Enterprise Server Teradata 15 SP4 ovmf as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ovmf-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ovmf as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 ovmf-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 ovmf as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ovmf-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ovmf as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 ovmf-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 qemu-ovmf-x86_64 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 qemu-ovmf-x86_64 as a component of SUSE Linux Micro 6.0 qemu-uefi-aarch64 as a component of SUSE Linux Micro 6.0 ovmf as a component of SUSE Linux Micro 6.0 qemu-ovmf-x86_64 as a component of SUSE Linux Micro 6.1 qemu-uefi-aarch64 as a component of SUSE Linux Micro 6.1 ovmf as a component of SUSE Linux Micro 6.1 ovmf as a component of SUSE Manager Proxy LTS 4.3 ovmf-tools as a component of SUSE Manager Proxy LTS 4.3 qemu-ovmf-x86_64 as a component of SUSE Manager Proxy LTS 4.3 ovmf as a component of SUSE Manager Retail Branch Server LTS 4.3 ovmf-tools as a component of SUSE Manager Retail Branch Server LTS 4.3 qemu-ovmf-x86_64 as a component of SUSE Manager Retail Branch Server LTS 4.3 ovmf as a component of SUSE Manager Server LTS 4.3 ovmf-tools as a component of SUSE Manager Server LTS 4.3 qemu-ovmf-x86_64 as a component of SUSE Manager Server LTS 4.3 ovmf as a component of openSUSE Leap 15.6 ovmf-tools as a component of openSUSE Leap 15.6 qemu-ovmf-ia32 as a component of openSUSE Leap 15.6 qemu-ovmf-x86_64 as a component of openSUSE Leap 15.6 qemu-ovmf-x86_64-debug as a component of openSUSE Leap 15.6 qemu-uefi-aarch32 as a component of openSUSE Leap 15.6 qemu-uefi-aarch64 as a component of openSUSE Leap 15.6 EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability. CVE-2025-2296 SLES-LTSS-TERADATA 15 SP2:ovmf SUSE Linux Enterprise Server 12 SP2-LTSS:ovmf SUSE Linux Enterprise Server 12 SP2-LTSS:ovmf-tools SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 12 SP4-LTSS:ovmf SUSE Linux Enterprise Server 12 SP4-LTSS:ovmf-tools SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-uefi-aarch64 SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:ovmf SUSE Linux Enterprise Server 12 SP5-LTSS:ovmf SUSE Linux Enterprise Server 12 SP5-LTSS:ovmf-tools SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-uefi-aarch64 SUSE Linux Enterprise Server 15 SP1-LTSS:ovmf SUSE Linux Enterprise Server 15 SP1-LTSS:ovmf-tools SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-uefi-aarch64 SUSE Linux Enterprise Server 15 SP2-LTSS:ovmf SUSE Linux Enterprise Server 15 SP2-LTSS:ovmf-tools SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-uefi-aarch64 SUSE Linux Enterprise Server 15-LTSS:ovmf SUSE Linux Enterprise Server 15-LTSS:ovmf-tools SUSE Linux Enterprise Server 15-LTSS:qemu-ovmf-x86_64 SUSE Linux Enterprise Server 15-LTSS:qemu-uefi-aarch64 SUSE Linux Enterprise Server Teradata 12 SP3:ovmf moderate 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L