CVE-2024-7138: Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Published Dec 19, 2024
·Updated
An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.
Affected Software
1 affected component
Silicon Labs RS9116 Bluetooth SDK
Event History
Dec 19, 2024
CVE Published
via MITRE·07:23 PM
Data Sourced
via MITRE·07:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-7138?
CVE-2024-7138 is considered a medium severity vulnerability due to its potential to cause a temporary denial of service.
2
How do I fix CVE-2024-7138?
To mitigate CVE-2024-7138, ensure that a watchdog timer is enabled for your device.
3
What is affected by CVE-2024-7138?
CVE-2024-7138 affects the Silicon Labs RS9116 Bluetooth SDK.
4
What can happen if CVE-2024-7138 is exploited?
If exploited, CVE-2024-7138 can lead to a temporary denial of service, requiring a hard reset of the device.
5
How does CVE-2024-7138 impact L2CAP packet handling?
CVE-2024-7138 impacts L2CAP packet handling by being triggered by specially crafted malformed packets.