# ovmf 2022.02-3ubuntu0.22.04.4: ovmf 2022.02-3ubuntu0.22.04.4 for Ubuntu 22.04.1 LTS (jammy) ovmf 2022.02-3ubuntu0.22.04.4, released August 12, 2025, fixes 25 CVEs in ovmf. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/ubuntu-jammy-ovmf-2022.02-3ubuntu0.22.04.4 - Platform: Linux - Released: Aug 12, 2025 - Priority: High (Closes CVE-2022-0778, high severity) - CVEs: 25, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [ovmf](https://patchblox.com/security/data/product/linux/ovmf.md) | Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-0778](https://patchblox.com/security/data/cve/CVE-2022-0778.md) | High | libssl3t64: The BN_mod_sqrt() function, which computes a modular square root, containsa bug that can cause it to loop forever for... | 7.5 | 0.7319 | | | [CVE-2023-0286](https://patchblox.com/security/data/cve/CVE-2023-0286.md) | High | libssl3t64: There is a type confusion vulnerability relating to X.400 addressprocessinginside an X.509 GeneralName | 7.5 | 0.6841 | | | [CVE-2021-3712](https://patchblox.com/security/data/cve/CVE-2021-3712.md) | High | libssl3t64: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRINGstructure which contains a buffer holding th... | 7.4 | 0.4814 | | | [CVE-2022-4450](https://patchblox.com/security/data/cve/CVE-2022-4450.md) | High | libssl3t64: The function PEM_read_bio_ex() reads a PEM file from a BIO and parses anddecodes the "name" (e.g | 7.5 | 0.2859 | | | [CVE-2022-4304](https://patchblox.com/security/data/cve/CVE-2022-4304.md) | High | libssl3t64: A timing based side channel exists in the OpenSSL RSA Decryptionimplementationwhich could be sufficient to recover a... | 7.5 | 0.2351 | | | [CVE-2024-9143](https://patchblox.com/security/data/cve/CVE-2024-9143.md) | High | libssl3t64: Issue summary: Use of the low-level GF(2^m) elliptic curve APIs withuntrustedexplicit values for the field polynomial... | 8.8 | 0.1248 | | | [CVE-2024-5535](https://patchblox.com/security/data/cve/CVE-2024-5535.md) | High | OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread | 9.1 | 0.0613 | | | [CVE-2023-0215](https://patchblox.com/security/data/cve/CVE-2023-0215.md) | High | libssl3t64: The public API function BIO_new_NDEF is a helper function used forstreamingASN.1 data via a BIO | 7.5 | 0.0502 | | | [CVE-2023-0464](https://patchblox.com/security/data/cve/CVE-2023-0464.md) | High | libssl3t64: A security vulnerability has been identified in all supported versionsof OpenSSL related to the verification of X.509... | 7.5 | 0.0399 | | | [CVE-2024-4741](https://patchblox.com/security/data/cve/CVE-2024-4741.md) | High | openssl-1_1: Fixed a use-after-free with SSL_free_buffers | 9.8 | 0.0328 | | | [CVE-2024-1298](https://patchblox.com/security/data/cve/CVE-2024-1298.md) | High | ovmf: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889). | 7.5 | 0.0022 | | | [CVE-2025-3770](https://patchblox.com/security/data/cve/CVE-2025-3770.md) | High | SMM IDT Privilege Escalation Vulnerability | 7.0 | 0.0018 | | | [CVE-2023-2650](https://patchblox.com/security/data/cve/CVE-2023-2650.md) | Routine | libssl3t64: Issue summary: Processing some specially crafted ASN.1 object identifiersordata containing them may be very slow.Impa... | 6.5 | 0.7536 | | | [CVE-2024-2511](https://patchblox.com/security/data/cve/CVE-2024-2511.md) | Routine | libssl1.1: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 s... | 5.9 | 0.5930 | | | [CVE-2023-3446](https://patchblox.com/security/data/cve/CVE-2023-3446.md) | Routine | openssl: Fix Excessive time spent checking DH keys and parameters | 5.9 | 0.0653 | | | [CVE-2023-5678](https://patchblox.com/security/data/cve/CVE-2023-5678.md) | Routine | libssl3t64: Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may... | 5.9 | 0.0509 | | | [CVE-2024-0727](https://patchblox.com/security/data/cve/CVE-2024-0727.md) | Routine | libssl3t64: Issue summary: Processing a maliciously formatted PKCS12 file may leadOpenSSLto crash leading to a potential Denial o... | 5.5 | 0.0319 | | | [CVE-2023-3817](https://patchblox.com/security/data/cve/CVE-2023-3817.md) | Routine | openssl: Fix Excessive time spent checking DH q parameter value | 5.9 | 0.0305 | | | [CVE-2023-0465](https://patchblox.com/security/data/cve/CVE-2023-0465.md) | Routine | libssl3t64: Applications that use a non-default option when verifying certificates maybevulnerable to an attack from a malicious... | 5.3 | 0.0177 | | | [CVE-2023-0466](https://patchblox.com/security/data/cve/CVE-2023-0466.md) | Routine | libssl3t64: The function X509_VERIFY_PARAM_add0_policy() is documented toimplicitly enable the certificate policy check when doin... | 5.3 | 0.0177 | | | [CVE-2024-13176](https://patchblox.com/security/data/cve/CVE-2024-13176.md) | Routine | nodejs24: Fix timing side-channel in ECDSA signature computation (bsc#1236136) | 6.5 | 0.0075 | | | [CVE-2024-38796](https://patchblox.com/security/data/cve/CVE-2024-38796.md) | Routine | edk2-aarch64: edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z]) | 5.9 | 0.0037 | | | [CVE-2025-2295](https://patchblox.com/security/data/cve/CVE-2025-2295.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 3.5 | 0.0025 | | | [CVE-2024-38805](https://patchblox.com/security/data/cve/CVE-2024-38805.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 6.3 | 0.0023 | | | [CVE-2024-38797](https://patchblox.com/security/data/cve/CVE-2024-38797.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in the HashPeImageByType() | 4.6 | 0.0022 | | --- Data as of 2026-11-13T08:00:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.