What is CVE-2026-98143?

CVE-2026-98143 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 6.19 onward and patched in 7.2.7 and 7.3-rc2. CVE-2026-98143 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98143?

CVE-2026-98143 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-98143?

Yes, CVE-2026-98143 has been patched. Fixed versions include 7.2.7 and 7.3-rc2. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-98143 actively exploited?

CVE-2026-98143 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98143

High

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPU_SET_{IFM,OFM}_PRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser has read it as a storage mode since the driver was added. That went unnoticed while unknown values fell through the switch, but now that they are rejected, every U65 command stream that asks for natural rounding (2) fails CMDSTREAM_BO_CREATE with -EINVAL. Mesa emits it for average pooling, concatenation, split, unpack, strided slice, LUT and argmax, which is 72 failures of the Teflon test suite on an i.MX93. Truncating rounding (1) is misread as well: it picks the two-tile address path and computes a bogus feature map size from tile bases the command stream never set. Read the field as a storage mode only on the hardware where it is one.

Package Linux Kernel

Published 2026-09-25

Last modified 2026-09-30

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 6.19 and later are affected. Fixed in 7.2.7, 7.3-rc2 and their respective stable series.

Affected from

≥ 6.19

Fixed in

✓ 7.2.7 7.2.x ✓ 7.3-rc2

References

2 total

Details

CVE ID CVE-2026-98143

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2026-09-25

Modified 2026-09-30

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-98143?

CVE-2026-98143 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 6.19 onward and has been patched in 7.2.7 and 7.3-rc2. CVE-2026-98143 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-98143?

CVE-2026-98143 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-98143?

Yes. CVE-2026-98143 has been patched. Fixed versions include 7.2.7 and 7.3-rc2. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-98143 actively exploited?

No. CVE-2026-98143 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.