Looks like Canonical and RedHat have both acknowledged the incident. Canonical link with full RCA and solution: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass?WUwbDVmRWk5RCtJZ2IyNUU2SyJ9#Recovery
RedHat link: https://access.redhat.com/security/vulnerabilities/grub2bootloader?sc_cid=7013a000002goqWAAQ& -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1889509 Title: grub boot error : "symbol 'grub_calloc' not found To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1889509/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs