Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-46300US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @fro… | ||||
| CVE-2026-43284US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
MSG_SPLICE_PAGES can attach pages from a pipe directly t… | ||||
| CVE-2026-31431US | —OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c… | ||||
references
External citations — patches, advisories, analysis.
- PPSA-2026-003: Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI - HTMLself
- CERT@VDE Security Advisories for Pilz GmbH & Co. KGexternal
- PPSA-2026-003: Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI - CSAFself
- For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)external
remediations (18)
- FixedIndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 10.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 23.06.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 25.12.2025 installed on IndustrialPI 4
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan