CVE-2026-46073

kernel: hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the powerz driver. When a signal interrupt occurs during the wait_for_completion_interruptible_timeout() function, the system fails to properly abort the USB Request Block (URB). This oversight can lead to the kernel attempting to read data from an uninitialized or unfilled transfer buffer, potentially causing system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-826 · Premature Release of Resource During Expected Lifetime