Merge "msm: eva: Fix for use after free"

msm/eva/msm_cvp_buf.c

@@ -652,14 +652,12 @@ int msm_cvp_unmap_buf_wncc(struct msm_cvp_inst *inst,
 			NUM_WNCC_BUFS : inst->unused_wncc_bufs.nr;
 		inst->unused_wncc_bufs.ktid = ++idx % NUM_WNCC_BUFS;
 	}
-	mutex_unlock(&inst->cvpwnccbufs.lock);
 
 	if (cbuf->smem->device_addr) {
 		msm_cvp_unmap_smem(inst, cbuf->smem, "unmap wncc");
 		msm_cvp_smem_put_dma_buf(cbuf->smem->dma_buf);
 	}
 
-	mutex_lock(&inst->cvpwnccbufs.lock);
 	list_del(&cbuf->list);
 	inst->cvpwnccbufs_table[buf_idx].fd = 0;
 	inst->cvpwnccbufs_table[buf_idx].iova = 0;