Probably not, depending on configuration. You can do very clever things with secure boot on Linux to have all kernel modules signed, etc, but if the attacker ha

Probably not, depending on configuration. You can do very clever things with secure boot on Linux to have all kernel modules signed, etc, but if the attacker has ring0 code execution anyway that can be evaded without a huge amount of effort.