"Major Linux Vulnerability Enables Bootkits on Most Distros"

A critical vulnerability in the shim component used by most Linux distributions allows attackers to install malware at the firmware level, potentially granting access to the deepest parts of a device. Exploiting the buffer overflow vulnerability, tracked as CVE-2023-40547, could neutralize secure boot protections and execute arbitrary code. While the attack scenarios involve significant hurdles, such as coercing a system to boot from HTTP and compromising a server, the use of HTTPS and physical access restrictions can mitigate these risks. Linux developers are working on patches to address this high-severity issue.