CVE-2025-47827

Description

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

References

https://github.com/Zedeldi/igelfs

https://github.com/Zedeldi/CVE-2025-47827

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS