Get the latest tech news

Shim vulnerability exposes most Linux systems to attack

This low-level software is the glue that enables Linux to run on Secure Boot PCs, and it has a nasty problem.

This time around, it's a critical vulnerability in shim -- the key link between Linux and your computer's firmware during boot. It's the bridge between modern PCs and servers' Unified Extensible Firmware Interface (UEFI) Secure Boot and Linux. Specifically, the vulnerable part of the shim code is the one that deals with systems using HTTP to boot from a central server on a network.

Get the Android app