# PXE Boot Flaw Exposes RHEL Systems

CVE-2026-97631 is a critical out-of-bounds write in EDK2’s PXE network-boot driver, rated CVSS 8.8 by Red Hat. It may enable unauthenticated code execution before the operating system starts or cause denial of service. The stated exposure is limited to affected RHEL and OpenShift environments during network boot; the report does not establish that all UEFI, TPM 2.0, or Secure Boot systems are affected and identifies no contract or procurement opportunity.

- Government IT buyers and contractors operating affected RHEL or OpenShift environments should identify systems that PXE-boot and verify remediation against Red Hat errata.
- The flaw is relevant to cybersecurity risk reviews for systems that process untrusted network packets during pre-boot; procurement teams can use the specific affected configuration to focus vendor and asset discussions rather than treating all UEFI-enabled systems as exposed.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** November 01, 2026

### Vendors
- Red Hat ()

### Key Quotes
> The vulnerability is exposed exclusively during network boot sequences when the PXE driver processes untrusted network packets before the operating system initializes.
> — Original poster

### Sources
- [The UEFI, TMP 2.0 and Secure boot vulnerability is finally public.](https://www.reddit.com/r/cybersecurity/comments/1xkzsum/the_uefi_tmp_20_and_secure_boot_vulnerability_is) - reddit-cybersecurity