CVE-2026-98143

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-09-25

Last updated on: 2026-09-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPU_SET_{IFM,OFM}_PRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser has read it as a storage mode since the driver was added. That went unnoticed while unknown values fell through the switch, but now that they are rejected, every U65 command stream that asks for natural rounding (2) fails CMDSTREAM_BO_CREATE with -EINVAL. Mesa emits it for average pooling, concatenation, split, unpack, strided slice, LUT and argmax, which is 72 failures of the Teflon test suite on an i.MX93. Truncating rounding (1) is misread as well: it picks the two-tile address path and computes a bogus feature map size from tile bases the command stream never set. Read the field as a storage mode only on the hardware where it is one.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-30

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98143

EUVD

EUVD-2026-86974

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b
Linux	Linux	5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b
Linux	Linux	6.19

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's ethosu accelerator driver. It involves misinterpreting bits 15:14 of NPU_SET_{IFM,OFM}_PRECISION on U65 hardware as a storage mode instead of a rounding mode. This causes command streams to fail with -EINVAL when natural rounding is requested, affecting operations like average pooling and concatenation.

Detection Guidance

This vulnerability is specific to the Linux kernel's ethosu accelerator driver and affects NPU hardware like U65. Detection requires checking kernel logs for CMDSTREAM_BO_CREATE failures with -EINVAL errors, particularly during operations like average pooling or concatenation. No direct network detection commands are applicable.

Impact Analysis

This vulnerability can cause failures in NPU operations on U65 hardware, leading to errors in tasks like average pooling, concatenation, and other neural network computations. It may disrupt applications relying on the ethosu accelerator.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel driver issue impacting NPU command streams, causing failures in specific hardware operations. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves the issue with NPU_SET_IFM_OFM_PRECISION field handling on U65 hardware. This requires kernel version updates or patches from your Linux distribution or vendor.

Hi! I’m here to help you understand CVE-2026-98143. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70