“Boothole” Bootloader Flaw Breaks Security on Most Linux, Windows Devices

Boothole is a critical GRUB2 buffer-overflow vulnerability that can be exploited to run arbitrary code during boot even on systems using Secure Boot, potentially allowing persistent, stealthy bootkits or malicious bootloaders across a vast range of Linux distributions and some Windows devices; remediation requires coordinated GRUB2 patches, signed shim updates, revocation files, and extensive testing, creating a prolonged window of risk for affected organizations.