CVE-2025-2296

Published: December 10, 2025Last modified: December 17, 2025

Description

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	edk2	Fixed (0.0.202508-r1)
	25 LTS	edk2	Fixed (0.0.202508-r1)
	Stream	edk2	Fixed (0.0.202508-r0)

References

https://github.com/tianocore/edk2/security/advisories/GHSA-6pp6-cm5h-86g5

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.