{"cves":["CVE-2025-9230"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[20241117-4.0.1.el9_7.3]\n- Replace upstream references [Orabug:36569119]\n\n[20241117-4.el9_7.3]\n- edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-125104]\n- edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-125104]\n- edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-125104]\n- edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-125104]\n- edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115923]\n- edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115923]\n- Resolves: RHEL-125104\n  ([edk2] VM panic on booting SNP guest with large memory on Genoa [rhel-9.7.z])\n- Resolves: RHEL-115923\n  (CVE-2025-9230 edk2: Out-of-bounds read  write in RFC 3211 KEK Unwrap [rhel-9.7.z])\n\n[20241117-4.el9_7.2]\n- edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-121875]\n- Resolves: RHEL-121875\n  (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.7.z])\n\n[20241117-4.el9_7.1]\n- edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-121875]\n- Resolves: RHEL-121875\n  (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.7.z])","id":"ELSA-2026-2776","ovalId":"oval:com.oracle.elsa:def:20262776","source":"oracle_linux","title":"ELSA-2026-2776:  edk2 security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-2776.html"}