A recursive lock deadlock can arise in the Linux kernel’s firmware loader when a device enters suspend or hibernation. During the power‑management notification, the code attempts to acquire a lock that it already holds, causing the thread to block forever. This stops the suspension process, leaving the system stuck and unable to complete power‑management transitions.

The issue exists in any Linux kernel where the firmware loader module is compiled. The affected code resides in the firmware_loader subsystem, and all kernels that include this code are subject to the deadlock. No specific vendor version is listed, so any system running an unpatched kernel is potentially impacted.

The flaw is a local denial‑of‑service that can be triggered by initiating a suspend or hibernate operation. The CVSS score is 5.5, indicating moderate severity, while the EPSS score is less than 1%, suggesting a low likelihood of exploitation. The vulnerability is not listed in KEV, indicating limited public exploitation to date. Nevertheless, administrators should treat this as a high‑risk issue in environments where suspend/hibernate functionality is critical, as the deadlock would render the device inoperable until the system is rebooted.