In the Linux kernel, the following vulnerability has been resolved: 9p: transfd/p9conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.