CVE-2025-47827

Published June 5th, 2025

View on NVD ↗

CVSS v3

4.6

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Zedeldi/CVE-2025-47827

PoC and vulnerability report for CVE-2025-47827.

GitHub

Zedeldi/igelfs

Python implementation of the IGEL filesystem.

GitHub