This update addresses many problems including theBitLocker recovery screen, the CVE-2024-38143 error, and so on.
However, this update caused Windows and Linux dual-boot devices to be unable to boot Linux.
Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.
![]()
Here is a true example:
Are you encountering this error?
If not, keep reading to learn how to prevent this from happening.
If yes, here are the detailed instructions for resolving the issue.

Are you suffering from Windows 11 KB5041585 issues such as PC slowdown and Vanguard crashes?
Now read this post to get some fixes.
However, the dual boot system was not correctly identified and was directly blocked.
![]()
Typecmdin the Windows search box, and then click theRun as administratoroption underCommand Promptfrom the right panel.
you’ve got the option to choose to shut down the secure boot and prevent future SBAT updates.
Here are the steps.
Find thesecure bootsetting in your BIOS menu and use your keyboard to disable it.
Boot your Linux system.
Press theCtrl + Alt + Tkeyboard shortcut to open your terminal.
Then pop in the following command and pressEnter:
sudo mokutil set-sbat-policy delete
Step 5.
Reboot into the Linux system, and then executemokutil list-sbat-revocationsin the terminal.
Access your BIOS configs menu again, and thenenable the secure boot.
Step 7. fire up the terminal and execute this command:mokutil sb-state.
Boot into Windows, and thenopen Command Prompt as administrator.
Hope you might restore the dual-boot function of Linux and Windows after performing the above steps.