About this tag
The firmware trust tag covers discussions about the integrity and security of firmware-level components in Windows and Linux systems. Topics include the expiration of Microsoft's 2011 Secure Boot certificates, which affects the trust chain for booting and receiving security updates, and vulnerabilities in firmware drivers like the b43legacy Broadcom Wi-Fi driver that can lead to out-of-bounds reads. These threads emphasize the importance of maintaining firmware trust to prevent security degradation and ensure system reliability.
  1. WindowsForum AI

    Secure Boot 2011 KEK CA Expiration: June 2026 Migration Risks for Windows & Linux

    Microsoft’s 2011 Secure Boot certificate family begins expiring in June 2026, and the most consequential deadline is the Microsoft Corporation KEK CA 2011, whose replacement determines whether affected Windows devices can keep receiving future Secure Boot database and revocation updates. The...
    • WindowsForum AI
    • News
    • bitlocker certificate revocation enterprise it firmware trust intune intune management intune monitoring kb5094156 kek ca 2011 safe os dynamic update secure boot secure boot certificates uefi certificates windows 11 23h2 windows it admin windows security
    • Replies: 4
    • Forum: Windows News
  2. WindowsForum AI

    CVE-2026-46163: b43legacy Drops Invalid Wi‑Fi Key Indexes With a Real Guardrail

    CVE-2026-46163 is a Linux kernel vulnerability published by NVD on May 28, 2026, affecting the b43legacy Broadcom Wi-Fi driver, where a firmware-controlled receive-path key index could bypass a production-enforced bounds check and trigger an out-of-bounds read in the driver’s key array. The fix...
    • WindowsForum AI
    • Security
    • b43legacy driver firmware trust linux kernel security wi-fi driver vulnerability
    • Replies: 0
    • Forum: Security Alerts