Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Nyxfrom the before-boot-even-starts dept.
A critical 16-year-old flaw in EDK II, open-source UEFI firmware code, lets crafted ICMP messages crash PXE network boots. On some firmware builds it can run code before Secure Boot starts. It matters most for servers that boot over the network, so watch for firmware updates from your server vendor.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.