The maintainers of shim at RedHat have patched a critical vulnerability that could have let an attacker gain privileged access to a Linux system even before the kernel was loaded, potentially leading to a complete system takeover. When working properly, a shim functions as an early stage bootloader that’s primarily used to let Linux distributions support the Secure Boot process.

Source: SC Magazine