SB2026092852 - Type conversion in Linux kernel accel ethosu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Type conversion (CVE-ID: CVE-2026-98143)

CWE-ID: CWE-704 - Type conversion

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause command stream processing failures or incorrect feature map size calculations.

The vulnerability exists due to incorrect interpretation of a hardware-specific precision field in the Ethos-U command stream parser when processing U65 command streams with rounding modes. A local user can submit a U65 command stream using natural or truncating rounding to cause command stream processing failures or incorrect feature map size calculations.

Natural rounding is emitted for operations including average pooling, concatenation, split, unpack, strided slice, LUT, and argmax.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/6b08adbda8ea797849e3654ce12cb3856ce6051a
• https://git.kernel.org/stable/c/db9deec5a345abc538d081fb221dc0b00a9695bd