When Microsoft’s security feed labeled CVE-2026-23347 around the Fintek F81604 USB CAN driver, the underlying bug looked deceptively small: a missing call to usb_anchor_urb() in the read bulk callback. In kernel terms, though, that small omission matters because an anchored URB is what lets the...