PC Gaming

9118 readers

751 users here now

For PC gaming news and discussion. PCGamingWiki

Rules:

Be Respectful.
No Spam or Porn.
No Advertising.
No Memes.
No Tech Support.
No questions about buying/building computers.
No game suggestions, friend requests, surveys, or begging.
No Let's Plays, streams, highlight reels/montages, random videos or shorts.
No off-topic posts/comments, within reason.
Use the original source, no clickbait titles, no duplicates. (Submissions should be from the original source if possible, unless from paywalled or non-english sources. If the title is clickbait or lacks context you may lightly edit the title.)

founded 2 years ago

MODERATORS

[email protected]

196

New UEFI vulnerability bypasses Secure Boot — bootkits stay undetected even after OS re-install (www.tomshardware.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

43 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 2 weeks ago (2 children)

Does that mean Linux is invulnerable?

[–] [email protected] 20 points 2 weeks ago

No, it means that Linux systems also need to blacklist the keys in their UEFI firmware. I don't know if distros push updates for those blacklists or if you have to do it manually.

[–] [email protected] 9 points 2 weeks ago

As drspod said, no, Linux is not invulnerable. For Linux users using legacy BIOS boot or using UEFI but not secure boot, this vulnerability doesn't make anything any more insecure than it was already. But any user, Linux or Windows, who is affected by this vulnerability (which is basically everyone who hasn't revoked permissions to the Microsoft keys in question), if they're using secure boot, no they're not. (That is to say, they can no longer depend on any of the guarantees that secure boot provides until they close the vulnerability.)