𝓢𝓮𝓮𝓙𝓪𝔂𝓔𝓶𝓶@lemmy.procrastinati.org to Linux@lemmy.ml · 9 months agoCritical vulnerability affecting most Linux distros allows for bootkitsarstechnica.comexternal-linkmessage-square26fedilinkarrow-up1171 cross-posted to: security@lemmy.ml
arrow-up1171external-linkCritical vulnerability affecting most Linux distros allows for bootkitsarstechnica.com𝓢𝓮𝓮𝓙𝓪𝔂𝓔𝓶𝓶@lemmy.procrastinati.org to Linux@lemmy.ml · 9 months agomessage-square26fedilink cross-posted to: security@lemmy.ml
minus-squaredsemy@lemm.eelinkfedilinkEnglisharrow-up59·9 months agoThis is a vulnerability in shim, which is a UEFI “bootloader” used by distros mainly to allow booting with the “stock” (Microsoft) secure boot keys. If you don’t use secure boot or don’t use shim (likely if you use your own keys), this doesn’t affect you at all. In any case this “critical vulnerability” mainly affects machines relying on shim which also boot over unencrypted HTTP.
minus-squarealliswell33 @lemmy.sdf.orglinkfedilinkarrow-up8·edit-29 months agoWould this affect systems booting to the refind bootloader without secure boot? Sorry for the ignorance just trying to figure out if I should be changing my system for this news.
minus-squareJordan_U@lemmy.mllinkfedilinkarrow-up5·9 months agoNo. This is a vulnerability which allows bypassing secure boot protections. You have already manually bypassed those protections by disabling secure boot.
This is a vulnerability in shim, which is a UEFI “bootloader” used by distros mainly to allow booting with the “stock” (Microsoft) secure boot keys.
If you don’t use secure boot or don’t use shim (likely if you use your own keys), this doesn’t affect you at all.
In any case this “critical vulnerability” mainly affects machines relying on shim which also boot over unencrypted HTTP.
Would this affect systems booting to the refind bootloader without secure boot? Sorry for the ignorance just trying to figure out if I should be changing my system for this news.
No
No.
This is a vulnerability which allows bypassing secure boot protections. You have already manually bypassed those protections by disabling secure boot.