Red Hat Product Errata RHBA-2026:12270 - Bug Fix Advisory
Issued:
2026-04-30
Updated:
2026-04-30

RHBA-2026:12270 - Bug Fix Advisory

Synopsis

edk2 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for edk2 is now available for Red Hat Enterprise Linux 10.

Description

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Bug Fix(es) and Enhancement(s):

  • Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-10.1.z] (JIRA:RHEL-121876)
  • edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.1.z] (JIRA:RHEL-115882)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
x86_64
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
x86_64
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat Enterprise Linux for ARM 64 10

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
aarch64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
aarch64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-debugsource-20250523-2.el10_1.2.x86_64.rpm SHA-256: 5903d18451ebd44bc2b6753f2cb48d9cd78181607482f0704d163f8542d78bf1
edk2-tools-20250523-2.el10_1.2.x86_64.rpm SHA-256: b1c3b20a47c31b7ee8c756f085d613f70209a1d35ed686fb0a4cd586b43ce5cc
edk2-tools-debuginfo-20250523-2.el10_1.2.x86_64.rpm SHA-256: b41af3d414977c8897665c96a4bb44d0c8be14f1b244e1507a376ede4a45f014
edk2-tools-doc-20250523-2.el10_1.2.noarch.rpm SHA-256: 1d07f3209d95bae6de78e39238a568bfe61d38bfe32e45010048459bd704e48b

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
edk2-debugsource-20250523-2.el10_1.2.aarch64.rpm SHA-256: 973fb50ee24d37709b5597ad7b00c633c9b88b098fe301937aeb08e37d6b9857
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2
edk2-tools-20250523-2.el10_1.2.aarch64.rpm SHA-256: 5c72c20d9b5a76374ee6212314f2095ab8873bd2c29902f5190d4931bdfce951
edk2-tools-debuginfo-20250523-2.el10_1.2.aarch64.rpm SHA-256: fddf1982d48ac1878663598a73b66f13041dcbe051f51b0f0978d06b4c272eeb
edk2-tools-doc-20250523-2.el10_1.2.noarch.rpm SHA-256: 1d07f3209d95bae6de78e39238a568bfe61d38bfe32e45010048459bd704e48b

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2

SRPM
x86_64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-debugsource-20250523-2.el10_1.2.x86_64.rpm SHA-256: 5903d18451ebd44bc2b6753f2cb48d9cd78181607482f0704d163f8542d78bf1
edk2-tools-20250523-2.el10_1.2.x86_64.rpm SHA-256: b1c3b20a47c31b7ee8c756f085d613f70209a1d35ed686fb0a4cd586b43ce5cc
edk2-tools-debuginfo-20250523-2.el10_1.2.x86_64.rpm SHA-256: b41af3d414977c8897665c96a4bb44d0c8be14f1b244e1507a376ede4a45f014
edk2-tools-doc-20250523-2.el10_1.2.noarch.rpm SHA-256: 1d07f3209d95bae6de78e39238a568bfe61d38bfe32e45010048459bd704e48b

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2

SRPM
ppc64le
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2

SRPM
s390x
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2

SRPM
aarch64
edk2-debugsource-20250523-2.el10_1.2.aarch64.rpm SHA-256: 973fb50ee24d37709b5597ad7b00c633c9b88b098fe301937aeb08e37d6b9857
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2
edk2-tools-20250523-2.el10_1.2.aarch64.rpm SHA-256: 5c72c20d9b5a76374ee6212314f2095ab8873bd2c29902f5190d4931bdfce951
edk2-tools-debuginfo-20250523-2.el10_1.2.aarch64.rpm SHA-256: fddf1982d48ac1878663598a73b66f13041dcbe051f51b0f0978d06b4c272eeb
edk2-tools-doc-20250523-2.el10_1.2.noarch.rpm SHA-256: 1d07f3209d95bae6de78e39238a568bfe61d38bfe32e45010048459bd704e48b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
aarch64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
x86_64
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
x86_64
edk2-ovmf-20250523-2.el10_1.2.noarch.rpm SHA-256: c04afaf5b67ac7b451121ce5a744b9f403cc6751079ef3ff65c9850d7c2f91d2

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2

SRPM
edk2-20250523-2.el10_1.2.src.rpm SHA-256: 402d7f77a272b5da027e5c9c8694d01e414806cb20bef4c6ac8614dcd8cac4e5
aarch64
edk2-aarch64-20250523-2.el10_1.2.noarch.rpm SHA-256: 8d6887b1345225e59d607eea88344840452c422a8a9c1e88cda049a1b3e4b9e0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.