Secure Boot bypass risk on nearly 200,000 Linux Framework sytems

Researchers at Eclypsium discovered that Framework shipped signed UEFI shells containing a dangerous 'mm' memory-modify command that can overwrite the Secure Boot security handler (gSecurity2), allowing attackers to disable signature verification and load persistent bootkits; approximately 200,000 Framework systems are impacted and firmware/DBX updates and temporary mitigations (physical access controls, DB key deletion) are being provided.