CVE-2026-74331

In the Linux kernel, the following vulnerability has been resolved:

firmwareloader: Fix recursive lock in devicecachefwimages()

A recursive locking deadlock can occur in the firmware loader's power management notification handler.

During system suspend or hibernation preparation, fwpmnotify() calls devicecachefwimages(). This function acquires fwlock to set the firmware cache state to FWLOADERSTARTCACHE and then iterates over all devices using dpmforeachdev() while still holding the lock.

For each device, devcachefwimage() schedules asynchronous work to cache the firmware. If memory allocation for the async work entry fails (e.g., in out-of-memory conditions), asyncschedulenodedomain() falls back to executing the work function synchronously in the current thread.

The synchronous execution path (_asyncdevcachefwimage() -> cachefirmware() -> requestfirmware() -> assignfw()) attempts to acquire fwlock again. Since the current thread already holds fwlock, this results in a recursive locking deadlock.

Fix this by releasing fwlock immediately after updating the cache state and before calling dpmforeachdev(). The lock is only needed to protect the state update. Concurrent firmware requests will correctly see the FWLOADERSTARTCACHE state and use the piggyback mechanism, which is independently protected by its own fwc->namelock.