os界的二选一，长见识了，估计要被欧美的反垄断部门罚了。

MicroSoft开始走下坡路了。。。 这招数都是临挂掉前才能用的办法。。。

楼主用心了！已经遇到更新后无法启动Linux问题，似乎可以通过PE中的修复Windows引导暂时解决。

的确有这种可能

Why is this Red Hat, Inc. CVE included in the Security Update Guide?

The vulnerability assigned to this CVE is in Linux Shim boot. It is being documented in the Security Update Guide to announce that the latest builds of Microsoft Windows address this vulnerability by blocking old, unpatched, Linux boot loaders by applying SBAT (Secure Boot Advanced Targeting) EFI variables in the UEFI library. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.

For more information see: CVE-2023-40547.

Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?

The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.

Will this update affect my ability to boot Linux after applying this update?

To address this security issue, Windows will apply a Secure Boot Advanced Targeting (SBAT) update to block vulnerable Linux boot loaders that could have an impact on Windows security. The SBAT value is not applied to dual-boot systems that boot both Windows and Linux and should not affect these systems. You might find that older Linux distribution ISOs will not boot. If this occurs, work with your Linux vendor to get an update.

红帽提的漏洞

BIOS 恢复出厂设置即可 恢复

猜测，阻止 linux 启动的 文件 在BIOS里（11代intel组装机，无硬盘 依旧 提示上图，）

版主 删帖吧，今天（之前 deepin+win11 联网更新的） 又重【全新】安装了 2个系统（相同版本号），一切 正常