<ul><li>The 'Bootkitty' Linux UEFI bootkit exploits the LogoFAIL flaws (CVE-2023-40238) to target systems using vulnerable firmware.</li><li>Bootkitty is the first UEFI bootkit designed to target Linux systems.</li><li>The bootkit disables the kernel's signature verification feature and preloads unknown ELF binaries via the Linux init process.</li><li>Bootkitty bypasses UEFI Secure Boot and exploits the LogoFAIL flaw to compromise systems running on vulnerable firmware.</li></ul>

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws

Discover more