CVE-2025-2486

Published: April 29, 2025Last modified: June 5, 2025

Notes

Ubuntu web-site gives 500, but github has this: https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-2486.json which tells us the affected package is edk2 and the details are: "built-in shell still present in AAVMF secboot image"

Status