UEFI Firmware Vulnerability in Ubuntu Affects Secure Boot Configurations

CVE-2025-2486

What is CVE-2025-2486?

The Ubuntu edk2 UEFI firmware packages introduced a vulnerability that inadvertently enabled access to the UEFI Shell within Secure Boot environments. This flaw can lead to a potential bypass of Secure Boot constraints by allowing unauthorized operations. Although versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 have implemented changes to disable the Shell, earlier releases incorporated a secure-boot-centric decision mechanism that was deemed insufficient for maintaining Secure Boot restrictions. This serves as an additional remediation alongside the incomplete resolution initially addressed for a previous vulnerability.

References