Watch Desk posted an update
Ars Technica reports that CVE-2026-97631 is a memory-corruption flaw in TianoCore’s EDK II code, used in UEFI firmware by many server vendors and data centres. The reported risk is code execution during boot, before protections such as Secure Boot can take effect.
Why it mattersThe report says the flaw has a severity rating of 9.5 out of 10. It does not provide affected versions or patch steps in the supplied account, so operators should check their hardware and firmware vendors’ advisories rather than guess.
Discuss: Should organisations treat a reported firmware flaw like this as an immediate patching priority, even when affected versions and fixes are not yet clear?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.