<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:media="http://search.yahoo.com/mrss/">
  <channel>
    <title>Bramble: EDK2</title>
    <link>https://news.ketelle.co.uk/entities/edk2</link>
    <description>Stories involving EDK2, told neutrally, with how each side covers them.</description>
    <language>en-gb</language>
    <atom:link href="https://news.ketelle.co.uk/entities/edk2/feed.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>Critical flaw in EDK2 UEFI firmware code could let attackers run code at boot</title>
      <link>https://news.ketelle.co.uk/stories/critical-code-execution-flaw-found-in-edk2-uefi-firmware-used-in-serve</link>
      <guid isPermaLink="true">https://news.ketelle.co.uk/stories/critical-code-execution-flaw-found-in-edk2-uefi-firmware-used-in-serve</guid>
      <pubDate>Wed, 28 Oct 2026 20:52:31 +0000</pubDate>
      <category>Technology</category>
      <description>A 9.5-severity memory-corruption flaw (CVE-2026-97631) in the open source EDK2 firmware codebase could let an attacker with local network access run code before the operating system loads. Its details became public before the planned January disclosure. (2 outlets: 2 left · 0 centre · 0 right)</description>
      <media:content url="https://cdn.arstechnica.net/wp-content/uploads/2024/04/malware.jpg" medium="image"/>
    </item>
  </channel>
</rss>
