EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
Red Hat Security Advisory 2024-5297-03 - An update for edk2 is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability.