What the fuck is an SBAT and why does everyone suddenly care

SBAT (Secure Boot Advanced Targeting) uses generation numbers to revoke vulnerable boot components. Microsoft pushed a Windows update setting minimum SBAT levels for grub due to security vulnerabilities, but it incorrectly affected some dual-boot systems. This caused Linux distributions' Shim bootloaders to refuse to boot older grub versions.