Local privilege escalation via missing fastboot lock checks

Secure boot bypass in Android SoC fastboot allows local users to gain elevated privileges by booting an unsigned image. The Amlogic U-Boot fastboot command dispatcher fails to require an unlocked bootloader for boot and OEM commands, allowing unsigned images or direct lock-state changes. An attacker needs local fastboot access but no user interaction, and successful exploitation enables arbitrary custom-kernel execution on the affected device.