Secure Boot Bypass Risk Threatens Nearly 200,000 Linux Framework Laptops

Secure Boot bypass risk threatens nearly 200,000 Linux Framework laptops

Around 200,000 Linux computer systems from American computer maker Framework were shipped with signed UEFI shell components that could be exploited to bypass Secure Boot protections.

UEFI Shell Flaws Let Hackers Disable Secure Boot On Over 200,000 Laptops - Cybernoz - Cybersecurity News

Security researchers have uncovered critical vulnerabilities in signed UEFI shells that allow attackers to completely bypass Secure Boot protections on approximately 200,000 Framework laptops and desktops. These flaws expose a fundamental weakness in firmware security that could enable persistent, undetectable malware infections at the most privileged system level. The vulnerabilities center around legitimate diagnostic tools that have been sign…