Microsoft has addressed issues related to dual-boot installations with Linux that arose following recent Windows updates.
In August, Microsoft rolled out a series of updates that inadvertently disrupted many dual-boot configurations and Linux boot media. The company had aimed to enhance security by blocking outdated boot managers, but this led to complications for users attempting to start Linux. The error message displayed was a clear indication of the problem: “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.”
Update should not take place with dual boot
To mitigate these issues, Microsoft designed the Secure Boot Advanced Targeting (SBAT) update to avoid installation on systems identified as dual-boot configurations. However, the detection mechanism often faltered, resulting in the errors experienced by users. Following the problematic August updates, Microsoft ceased distribution of the SBAT update in September, meaning only the August updates could trigger the issue. The company has since announced that the problem has been resolved with the security updates released on the May patch day.
While Microsoft has confirmed that the issue is fixed, details about the specific solution remain vague. It appears that the SBAT updates are being reinstated, accompanied by improved dual-boot detection, although this has not been officially verified. A range of Windows versions are affected, including Windows Server editions from 2012 to 2022, as well as desktop systems such as Windows 11 (versions 23H2, 22H2, and 21H2) and Windows 10 (versions 22H2, 21H2, and Enterprise 2015 LTSB).
In August, Microsoft also provided guidance on how users could prevent the SBAT update by creating specific registry keys. Additionally, the company outlined steps for restoring dual-boot systems, offering a lifeline to those impacted by the initial disruptions.
URL of this article:
https://www.heise.de/-10386397
Links in this article:
[1] https://learn.microsoft.com/en-us/windows/release-health/status-windows-server-2022#3377msgdesc
[2] https://www.heise.de/news/Patchday-Angreifer-attackieren-Windows-ueber-fuenf-Sicherheitsluecken-10382712.html?from-en=1
[3] mailto:dmk@heise.de
[4] https://www.facebook.com/heiseonlineEnglish
[5] https://www.linkedin.com/company/104691972
[6] https://social.heise.de/@heiseonlineenglish
[7] https://www.heise.de/news/Microsoft-loesst-Dual-Boot-Probleme-von-Windows-und-Linux-10386354.html
Copyright © 2025 Heise Medien
