All “lighting fixtures” which have a “smart” capability which can be EOP'd. They appear to mostly be Linux-based ARM or MIPS devices.

This device ships with an open U-boot installation

This exploit is patched as of 3.0.74, but may still be accessible with certain “old stock” devices. Here, the “main controller” for these little light bulbs has a method for temporary root access to the filesystem.

https://www.exploitee.rs/index.php/Greenwave_Reality_Bulbs

Do not power up the lamp directly from the mains

A port made with heavy optimizations. Taken down from the internet due to legal “licensing” trash, hence the archive links. Running an OS on this is practically impossible due to the minuscule RAM (108KB).

https://web.archive.org/web/20210613173646/https://github.com/next-hack/MG21DOOM

https://web.archive.org/web/20210613155054/https://next-hack.com/index.php/2021/06/12/lets-port-doom-to-an-ikea-tradfri-lamp/

https://web.archive.org/web/20210614091731/https://hackaday.io/project/180182-hacking-an-ikea-trdfri-lamp-to-run-doom/details