CVE-2026-74331

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, the fw pm notify() function calls device cache fw images(), which acquires fw lock to set the firmware cache state to FW LOADER START CACHE. While holding this lock, it iterates over devices using dpm for each dev(). If memory allocation for asynchronous work fails, async schedule node domain() executes the work synchronously. This synchronous path ( async dev cache fw image() -> cache firmware() -> request firmware() -> assign fw()) attempts to acquire fw lock again, leading to a deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.