Measured-boot logs can grow when they used to stop
Brief
The ACPI table that describes the log to the OS stays the old size.
Notes
ffaaf0f14cd4 landed 2026-08-26T03:58:17Z (Aug 25 08:58 PM PT) on master, after edk2-stable202608. SecurityPkg Tcg2Dxe doubles the in-memory TCG event log when it would truncate, writes a truncation marker on FinalEventLog, and leaves the ACPI LAML/LASA region unscaled. Allocation is BootServices. TcgLogTest was added.
No GHSA, no new CVE. Public text is a precaution for large logs and post-quantum hashes, not a disclosed Secure Boot bypass.
Commit ffaaf0f14cd44749dfb5a51f460b68ae2fcb7413