Serious Discussion Critical vulnerability affecting most Linux distros allows for bootkits

[MuzzMelbourne]

Linux developers are in the process of patching a high-severity vulnerability that, in certain cases, allows the installation of malware that runs at the firmware level, giving infections access to the deepest parts of a device where they’re hard to detect or remove.


The vulnerability resides in shim, which in the context of Linux is a small component that runs in the firmware early in the boot process before the operating system has started. More specifically, the shim accompanying virtually all Linux distributions plays a crucial role in secure boot, a protection built into most modern computing devices to ensure every link in the boot process comes from a verified, trusted supplier. Successful exploitation of the vulnerability allows attackers to neutralize this mechanism by executing malicious firmware at the earliest stages of the boot process before the Unified Extensible Firmware Interface firmware has loaded and handed off control to the operating system.

Critical vulnerability affecting most Linux distros allows for bootkits

Buffer overflow in bootloader shim allows attackers to run code each time devices boot up.

arstechnica.com

 

[MuzzMelbourne]

My Linux Mint just did a full Kernal update for those not using Update Manager...

 

[LennyFox]

My Linux Mint just did a full Kernal update for those not using Update Manager...

+1 on my potato PC (NL wednesday evening at 19.50)