The Linux kernel monitors USB transfers for power monitoring. When wait_for_completion_interruptible_timeout is interrupted by a signal, the function should terminate the transfer request by calling usb_kill_urb(). The original code omitted this call for signal deliveries, leaving the transfer active and the buffer unfilled. A subsequent read from the empty buffer can cause the kernel to process invalid data, potentially leading to a crash or memory corruption. The primary consequence is a local denial of service, as the kernel can become unstable if a user‑space process sends a signal during a power‑monitor read.

This flaw exists in the Linux kernel across all released versions that include the hwmon powerz driver. The vendor is Linux. Exact version ranges are not specified in the advisory, so any kernel that has not applied the recent patch is potentially vulnerable.

No publicly available exploit is known and the EPSS score is not available, indicating a low probability of widespread exploitation. Because the defect resides in kernel space, its impact is local but can cause a crash when an attacker can trigger a signal during a power‑monitor read. The overall risk is moderate and warrants patching before use in environments where the power monitoring code is active.