Integrity on Embedded Linux Devices under the Cyber Resilience Act

The Cyber Resilience Act requires embedded Linux devices to protect integrity of data, commands, programs, and configuration against unauthorized modification. Vendors must conduct a threat model identifying assets like bootloader, kernel, and application binaries. No single control covers all assets; controls depend on the product and threat model.