I use Debian and I also was affected by this Windows update. I was able to boot by disabling secure boot. I also found this option that apparently fixes the problem by changing the sbat policy using mokutil. But I haven’t tried it out yet. Has anyone got any luck with something else besides disabling secure boot?