Impact of Linux Kernel vulnerabilities on B&R products

B&R products running vulnerable Linux kernel versions are affected by publicly reported kernel vulnerabilities that allow privilege escalation. Exploitation requires local user access with low-privileged credentials and could allow an attacker to escalate to system administrator (root) level. Public proof-of-concept exploits are available; exploitation has been validated by security researchers but B&R reports no active attacks on B&R products at time of publication. APROL has a vendor patch available. For other affected products, workarounds include strict access control enforcement and kernel updates via Debian repositories where available. Linux for B&R and X20EDS410 products do not have patches available; customers must implement the access control and hardening workarounds.