Code-execution flaw in UEFI firmware affects most servers on planet Earth

A critical flaw in EDK2, the widely used UEFI firmware codebase, allows attackers to execute code early in the boot process, before the operating system loads, Ars Technica reports. Because EDK2 is used in most servers, the flaw affects the majority of server hardware; code execution at the firmware level can persist below the operating system and evade many conventional defences.