In the Linux kernel, the following vulnerability has been resolved:firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()If the __qcuefi pointer is not set, then in the original code, we wouldhold onto the lock. That means that if we tried to set it later, thenit would cause a deadlock. Drop the lock on the error path. That'swhat all the callers are expecting.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds