CVE ID :CVE-2026-6862 Published : April 22, 2026, 2:17 p.m. | 58 minutes ago Description :A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS). Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...