The Linux-side was actually part of the vulnerability here "After comparing the enrollment operations on the Windows and Linux sides, we found that while enrol

The Linux-side was actually part of the vulnerability here "After comparing the enrollment operations on the Windows and Linux sides, we found that while enrolling via Windows follows the enrollment process specified in the SDCP spec, enrolling via Linux does not."