The Linux kernel's uvcvideo driver had a deadlock vulnerability triggered when uvc_status_stop was called from the async_ctrl.work context. Specifically, cancel_work_sync waits for uvc_ctrl_status_event_work to complete, but since uvc_status_stop is called within that work function, it causes a deadlock. The patch fixes this by having uvc_status_stop return early if it detects it is running inside the work function, preventing the deadlock and ensuring flush_status remains false until uvc_status_start is called again.

This vulnerability causes a deadlock in the kernel when handling asynchronous controls on UVC cameras, potentially leading to system hangs or degraded functionality related to video device operations. There is no indication of code execution or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a kernel-level issue, applying the official Linux kernel updates when available is recommended to resolve the deadlock. No alternative mitigations are specified.