Comment by ronsor

Hmm... Mount efivarfs, change boot configuration to use a backdoored initramfs. Then fake a kernel panic screen and reboot :)