CVE-2026-46073

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt<br /> <br /> wait_for_completion_interruptible_timeout() returns -ERESTARTSYS when<br /> interrupted. This needs to abort the URB and return an error. No data<br /> has been received from the device so any reads from the transfer<br /> buffer are invalid.<br /> <br /> The original code tests !ret, which only catches the timeout case (0).<br /> On signal delivery (-ERESTARTSYS), !ret is false so the function skips<br /> usb_kill_urb() and falls through to read from the unfilled transfer<br /> buffer.<br /> <br /> Fix by capturing the return value into a long (matching the function<br /> return type) and handling signal (negative) and timeout (zero) cases<br /> with separate checks that both call usb_kill_urb() before returning.