Summary
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
Impact
Authenticated users with the ability to execute their own code on the device can exploit these vulnerabilities for a kernel memory corruption and denial of service.
Affected Product(s)
| Model no. | Product name | Affected versions |
|---|---|---|
| IndustrialPI OS 10.06.2025 installed on IndustrialPI 4 | picontrol <2.7.0-1, picontrol <2.8.0-1 | |
| IndustrialPI OS 15.06.2026 installed on IndustrialPI 4 | picontrol <2.7.0-1, picontrol <2.8.0-1 | |
| IndustrialPI OS 23.06.2025 installed on IndustrialPI 4 | picontrol <2.7.0-1, picontrol <2.8.0-1 | |
| IndustrialPI OS 25.12.2025 installed on IndustrialPI 4 | picontrol <2.7.0-1, picontrol <2.8.0-1 |
Vulnerabilities
Expand / Collapse allNozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the process-image buffer and corrupt adjacent kernel memory, resulting in kernel memory corruption and denial of service, by supplying crafted device configuration data and crafted input through the piControl character device.
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to trigger use-after-free and invalid pointer dereferences on kernel configuration objects, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests through the piControl character device.
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and event-list state and disclose a small amount of adjacent kernel memory, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests from multiple threads through the piControl character device.
Remediation
Update package 'picontrol' to version 2.8.0-1 or higher.
Acknowledgments
Pilz GmbH & Co. KG thanks the following parties for their efforts:
- CERT@VDE for coordination (see https://certvde.com )
Revision History
| Version | Date | Summary |
|---|---|---|
| 1.0.0 | 10/20/2026 13:00 | Initial Version |