Baton Drop is the name commonly used for CVE-2022-21894, a Secure Boot bypass vulnerability involving vulnerable boot components. Secure Boot checks whether startup components are trusted before allowing them to run. Exploiting a vulnerable component can undermine that protection and allow untrusted code to enter the boot process.
In attacks, a threat actor may use the bypass to load a bootkit or other malicious component before the operating system and many security tools start. Defenders should apply the relevant updates and ensure that affected signing certificates or boot components are revoked; patching alone may not remove trust in an already signed vulnerable component. Validate firmware and boot configuration as part of remediation.