CVE-2025-47827

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-47827
CWE	https://cwe.mitre.org/data/definitions/347.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-47827

CWE

https://cwe.mitre.org/data/definitions/347.html

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://cwe.mitre.org/data/definitions/463.html
https://cwe.mitre.org/data/definitions/475.html

References

https://github.com/Zedeldi/CVE-2025-47827
https://github.com/Zedeldi/igelfs
https://github.com/Zedeldi/CVE-2025-47827

Improper Verification of Cryptographic Signature

Weakness

Related Attack Patterns

References