Cant boot to older kernel after applying boot hole vulnerability patch (shim update) in Hyper-V

Solution Verified - Updated -


  • Unable to boot into older kernel after shim and grub2 package update with error you need to load the kernel first.
error: ../../grub-core/loader/i386/efi/linux.c:215:(hd0,gpt2)/vmlinuz-4.18.0-193.el8.x86_64 has invalid signature.
error: ../../grub-core/loader/i386/efi/linux.c:94:you need to load the kernel first.

Press any key to continue...


  • Red Hat Enterprise Linux (RHEL) 7 and 8
  • kernel 4.18.0-193.14.3.el8_2.x86_64 (on RHEL8)
  • shim-x64-15-15.el8_2.x86_64 (on RHEL8)
  • Windows Server 2016 - 10.0.14393 Operating System Patchlevel 3808
  • Hyper-V guest

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In