Description
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
Metrics
CVSS 3.1 4.6/10
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://github.com/Zedeldi/CVE-2025-47827Exploit, Third Party Advisory
- https://github.com/Zedeldi/igelfsProduct
- https://github.com/Zedeldi/CVE-2025-47827Exploit, Third Party Advisory
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47827US Government Resource
Timeline
- Published
- Jun 5, 2025
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Oct 14, 2025
- NVD status
- Analyzed