media: cec: cec-api: add locking in cec_release()

stable inclusion
from stable-v4.19.316
commit d2cfbc5298add5e0c6cfe8b343f73dfdf01c8b1c
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8YC89
CVE: CVE-2024-23848

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d2cfbc5298add5e0c6cfe8b343f73dfdf01c8b1c



--------------------------------

[ Upstream commit 42bcaacae924bf18ae387c3f78c202df0b739292 ]

When cec_release() uses fh->msgs it has to take fh->lock,
otherwise the list can get corrupted.

Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Reported-by: Yang, Chenyuan <cy54@illinois.edu>
Closes: https://lore.kernel.org/linux-media/PH7PR11MB57688E64ADE4FE82E658D86DA09EA@PH7PR11MB5768.namprd11.prod.outlook.com/


Fixes: ca684386 ("[media] cec: add HDMI CEC framework (api)")
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Yongqiang Liu <liuyongqiang13@huawei.com>