Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

No pxe boot item 'UEFI PXEv4 (MAC address)' after applying fix for CVE-2023-45237 #82

Open
kkang-wr opened this issue Feb 10, 2025 · 3 comments
Open

No pxe boot item 'UEFI PXEv4 (MAC address)' after applying fix for CVE-2023-45237 #82

kkang-wr opened this issue Feb 10, 2025 · 3 comments

Comments

@kkang-wr
Copy link

Hi,

The pxe boot item 'UEFI PXEv4 (MAC address)' in ovmf firmware dispears after applying fix for CVE-2023-45237

tianocore/edk2@4c4ceb2

Ubuntu 2404 doesn't include the commit and do not has such issue. And it could be reproduced on Fedora 41 which includes the fix.
brainhoard-github pushed a commit to distro-core-curated-mirrors/poky-contrib that referenced this issue Feb 20, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
b469531 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
@r1chard-lyu
Copy link

The patch "712797cf19 OvmfPkg: wire up RngDxe" has fixed the issue.

brainhoard-github pushed a commit to distro-core-curated-mirrors/poky-contrib that referenced this issue Feb 24, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
7eaae4e 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
brainhoard-github pushed a commit to distro-core-curated-mirrors/poky-contrib that referenced this issue Feb 25, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
9e374f3 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
brainhoard-github pushed a commit to distro-core-curated-mirrors/poky-contrib that referenced this issue Feb 26, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
d484c64 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
brainhoard-github pushed a commit to distro-core-curated-mirrors/poky-contrib that referenced this issue Feb 27, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
70c58e3 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
@kkang-wr
Copy link
Author

@r1chard-lyu thanks a lot. I'll check it.

halstead pushed a commit to openembedded/openembedded-core that referenced this issue Feb 28, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
d3f399f 
This reverts commit 6f8bdaa.

his reverts commit 4c2d3e37308cac98614dfafed79b7323423af8bc.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
halstead pushed a commit to yoctoproject/poky that referenced this issue Feb 28, 2025
@kkang-wr @sakoman
Revert "ovmf: Fix CVE-2023-45237"
4b020e6 
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
jpuhlman pushed a commit to MontaVista-OpenSourceTechnology/poky that referenced this issue Mar 4, 2025
@kkang-wr @jpuhlman
Revert "ovmf: Fix CVE-2023-45237"
b47f933 
Source: poky
MR: 172316
Type: Integration
Disposition: Merged from poky
ChangeID: 4b020e6
Description:

This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

tianocore/tianocore.github.io#82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
Signed-off-by: Jeremy A. Puhlman <[email protected]>
@kkang-wr
Copy link
Author

@r1chard-lyu it seems commit "712797cf19 OvmfPkg: wire up RngDxe" doesn't work for me. Actually I am working on Yocto project and the ovmf version is edk2-stable202411 in layer oe-core master branch:

* 0f3867fa6e (HEAD -> master, tag: edk2-stable202411) UefiPayloadPkg/UefiPayloadEntry: Fix PT protection in 5 level paging

it contains the commit 712797cf19. But when I use the generated firmware,

$ qemu-system-x86_64 -enable-kvm  -m 4G -nographic -drive if=pflash,format=raw,file=ovmf/ovmf.code.fd

it still only has one boot item:

   Boot Manager Menu                                     

   EFI Internal Shell

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@kkang-wr @r1chard-lyu