# efi-shell-arm 2024.02-2ubuntu0.6: efi-shell-arm 2024.02-2ubuntu0.6 for Ubuntu 24.04.5 LTS (noble)

efi-shell-arm 2024.02-2ubuntu0.6, released August 12, 2025, fixes 17 CVEs in efi-shell-arm. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-noble-efi-shell-arm-2024.02-2ubuntu0.6
- Platform: Linux
- Released: Aug 12, 2025
- Priority: High (Closes CVE-2024-6119, high severity)
- CVEs: 17, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [efi-shell-arm](https://patchblox.com/security/data/product/linux/efi-shell-arm.md) | Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-6119](https://patchblox.com/security/data/cve/CVE-2024-6119.md) | High | openssl: openssl: Possible denial of service in X.509 name checks | 7.5 | 0.6658 |  |
| [CVE-2024-9143](https://patchblox.com/security/data/cve/CVE-2024-9143.md) | High | libssl3t64: Issue summary: Use of the low-level GF(2^m) elliptic curve APIs withuntrustedexplicit values for the field polynomial... | 8.8 | 0.1248 |  |
| [CVE-2024-5535](https://patchblox.com/security/data/cve/CVE-2024-5535.md) | High | OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread | 9.1 | 0.0613 |  |
| [CVE-2024-4741](https://patchblox.com/security/data/cve/CVE-2024-4741.md) | High | openssl-1_1: Fixed a use-after-free with SSL_free_buffers | 9.8 | 0.0328 |  |
| [CVE-2024-1298](https://patchblox.com/security/data/cve/CVE-2024-1298.md) | High | ovmf: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889). | 7.5 | 0.0022 |  |
| [CVE-2025-3770](https://patchblox.com/security/data/cve/CVE-2025-3770.md) | High | SMM IDT Privilege Escalation Vulnerability | 7.0 | 0.0018 |  |
| [CVE-2024-2511](https://patchblox.com/security/data/cve/CVE-2024-2511.md) | Routine | libssl1.1: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 s... | 5.9 | 0.5930 |  |
| [CVE-2023-3446](https://patchblox.com/security/data/cve/CVE-2023-3446.md) | Routine | openssl: Fix Excessive time spent checking DH keys and parameters | 5.9 | 0.0653 |  |
| [CVE-2023-5678](https://patchblox.com/security/data/cve/CVE-2023-5678.md) | Routine | libssl3t64: Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may... | 5.9 | 0.0509 |  |
| [CVE-2024-0727](https://patchblox.com/security/data/cve/CVE-2024-0727.md) | Routine | libssl3t64: Issue summary: Processing a maliciously formatted PKCS12 file may leadOpenSSLto crash leading to a potential Denial o... | 5.5 | 0.0319 |  |
| [CVE-2023-3817](https://patchblox.com/security/data/cve/CVE-2023-3817.md) | Routine | openssl: Fix Excessive time spent checking DH q parameter value | 5.9 | 0.0305 |  |
| [CVE-2023-6237](https://patchblox.com/security/data/cve/CVE-2023-6237.md) | Routine | libssl3t64: Issue summary: Checking excessively long invalid RSA public keys may takea long time.Impact summary: Applications tha... | 5.9 | 0.0263 |  |
| [CVE-2024-13176](https://patchblox.com/security/data/cve/CVE-2024-13176.md) | Routine | nodejs24: Fix timing side-channel in ECDSA signature computation (bsc#1236136) | 6.5 | 0.0075 |  |
| [CVE-2024-38796](https://patchblox.com/security/data/cve/CVE-2024-38796.md) | Routine | edk2-aarch64: edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z]) | 5.9 | 0.0037 |  |
| [CVE-2025-2295](https://patchblox.com/security/data/cve/CVE-2025-2295.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 3.5 | 0.0025 |  |
| [CVE-2024-38805](https://patchblox.com/security/data/cve/CVE-2024-38805.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 6.3 | 0.0023 |  |
| [CVE-2024-38797](https://patchblox.com/security/data/cve/CVE-2024-38797.md) | Routine | efi-shell-aa64: EDK2 contains a vulnerability in the HashPeImageByType() | 4.6 | 0.0022 |  |

---

Data as of 2026-11-12T13:55:20Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.