CVE-2025-47827 IGEL IGEL OS
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
- CVSS
- not scored
On CISA’s exploited list
IGEL OS Use of a Key Past its Expiration Date Vulnerability
- Added
- 2025-10-14
- Federal patch deadline
- 2025-11-04
- Ransomware use
- not known