blob: 798e77278ad7b17af2e8603c146f7036cefa1ebd (
plain) (
blame)
1
2
3
|
sdhci: DMA reentrancy issue leads to an infinite loop
Description of problem:
When sdhci transfers multiple blocks, it doesnot check if the dma-write buffer pointer overlaps with its MMIO region, crafted content can cause DoS because of infinite loop and CPU consumption.
|