Denial of Service Flaw in SiWx91x Devices by Silicon Labs

CVE-2024-8361

What is CVE-2024-8361?

A vulnerability in SiWx91x devices involves the SHA2/224 hashing algorithm returning a 256-bit hash instead of the expected 224-bit. This discrepancy leads to a software assertion failure, resulting in a Denial of Service (DoS). If a watchdog timer is in place, the device can restart automatically once the timer expires. However, in scenarios lacking a watchdog, recovery necessitates a hard reset, impacting device availability and functionality.

References