CVE-2026-97631 doesn’t affect home and small office users, or any other users who boot their devices solely from disk drives. Instead, it applies only to organizations with machines that boot from local networks, or conceivably from Internet-connected resources.
Certain companies restore images through the network and/or solely boot machines from the network depending on the field of work, and this affects them.
No, it’s a vulnerability with PXE booting, AKA “boot to network”. While most hardware has the capability (often used to load the device in the first place), I would question how many are set to use this on a routine basis.
This sounds like something scary in a lab, but nearly useless in the real world.
Don’t tell me what I can’t do at home!!
Thank you ever so much for this comforting snippet. 🙏
At my company this isn’t the norm. Maybe kickstart data comes from the network but not the OS itself.
Certain companies restore images through the network and/or solely boot machines from the network depending on the field of work, and this affects them.
So I’m guessing this means the wake on lan “magic packet”??
No, it’s a vulnerability with PXE booting, AKA “boot to network”. While most hardware has the capability (often used to load the device in the first place), I would question how many are set to use this on a routine basis.
This sounds like something scary in a lab, but nearly useless in the real world.
no, that just wakes the system up.
this is about when the UEFI is configured to boot from network, instead of booting the operating system installed to a local disk.