“Whether a proof of concept or not, Bootkitty marks an interesting move forward in the UEFI threat landscape, breaking the belief about modern UEFI bootkits being Windows-exclusive threats,” ESET researchers wrote. “Even though the current version from VirusTotal does not, at the moment, represent a real threat to the majority of Linux systems, it emphasizes the necessity of being prepared for potential future threats.”
And many mainboards also suck in this regard. On mine, I can set secure boot mode to either ‘Windows OS’ (which means secure boot on) or ‘Other OS’ (which means secure boot is off). Took me a couple hours to figure that out