Denial-of-Service Vulnerability in Gecko OS by Silicon Labs

CVE-2025-2838

What is CVE-2025-2838?

This vulnerability in Silicon Labs' Gecko OS allows an attacker to exploit a flaw in DNS response processing, leading to an infinite loop and ultimately causing a denial-of-service condition. Since no authentication is required, network-adjacent attackers can easily target affected installations, significantly disrupting system availability. To secure systems, it's essential to monitor for this vulnerability and apply any necessary patches or mitigations.

References