CVE-2026-97631 doesn\u2019t affect home and small office users, or any other users who boot their devices solely from disk drives. Instead, it applies only to organizations with machines that boot from local networks, or conceivably from Internet-connected resources. Even then, the targeted firmware must rely on EDK2, as opposed to a different reference implementation, and use the PXE functionality (which is turned on by default).<\/p>\n
In an email, Intel said that none of its \u201ccommercial products currently under security support\u201d are known to be affected. \u201cIntel does not include the affected EDK2 functionality in its reference code, though it may be integrated by an OEM board vendor or system manufacturer,\u201d the company added. It advised customers to check with their system manufacturer for specific guidance. Publicly available Intel reference code<\/a>, however, makes reference to EDK2. Further, TianoCore has said<\/a> that each Intel-supplied UEFI development kit \u201cis a fully validated implementation\u2026 for a specific revision of the EDK II source.\u201d Many other Intel documents reference EDK2 as well.<\/p>\n Arm, meanwhile, responded to a list of questions with: \u201cCVE-2026-97631 is not directly applicable to Arm\u2019s product portfolio.\u201d Like Intel, firmware<\/a> the company makes<\/a> available also borrows heavily from EDK2. TianoCore has also documented<\/a> Arm\u2019s reliance on EDK2.<\/p>\n While it\u2019s possible some platforms are free of EDK2 code, it\u2019s prudent for users of all servers to investigate if CVE-2026-97631 affects them.<\/p>\n Questions sent to AMD, Phoenix Technologies, AMI, Microsoft, and Amazon\u2014likely some of the other biggest organizations affected\u2014went unanswered when this post went live. Without concrete answers to questions about the use of EDK2 by organizations like these, it\u2019s impossible to say what or how devices are affected and what actions, if any, these organizations, or their users, should take. Representatives from the TianoCore Project also didn\u2019t respond.<\/p>\n","protected":false},"excerpt":{"rendered":"CVE-2026-97631 doesn\u2019t affect home and small office users, or any other users who boot their devices solely from…\n","protected":false},"author":2,"featured_media":896880,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[74],"class_list":["post-896879","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/896879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=896879"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/896879\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/896880"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=896879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=896879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=896879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}