Description
In the Linux kernel, the following vulnerability has been resolved:

accel: ethosu: Fix ethosu_job_open() return value

A WARN_ON() returns a 0 or 1, not the original negative errno. Just drop
the WARN_ON() as the FD open will pass the return code to userspace and
there's only one possible source of the error (drm_sched_entity_init()).
Published: 2026-09-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Inaccurate error handling leading to misleading success status
Action: Assess Impact
AI Analysis

Impact

In the Linux kernel, a flaw in the ethosu driver caused the ethosu_job_open() function to return a 0 or 1 value from a WARN_ON() check instead of the original negative error code. This means the kernel would report a successful opening of a file descriptor even when initialization of the DRM scheduling entity failed, potentially allowing code to proceed under false assumptions about the driver state.

Affected Systems

All Linux kernel installations that include the ethosu driver are potentially affected, as the issue exists in the kernel source prior to the commit that fixed this function. No specific version range was supplied, so any kernel that contains the unintended WARN_ON() behavior is in scope.

Risk and Exploitability

Based on the description, it is inferred that an attacker would need to rely on the incorrect success status to manipulate kernel behavior. The CVSS score of 5.5 indicates a moderate severity. The EPSS score of < 1% and absence from KEV suggest low exploitation probability. The flaw merely corrupts error reporting, so it is unlikely to be directly exploitable.

Generated by OpenCVE AI on October 1, 2026 at 09:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that contains the ethosu_job_open patch.
  • Adjust any application code that relies on ethosu_job_open's return value to properly handle kernel error codes.
  • Continuously monitor system logs for WARN_ON() entries related to ethosu_job_open and investigate any failures promptly.

Generated by OpenCVE AI on October 1, 2026 at 09:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 08:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-390

Wed, 30 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-393
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Fri, 25 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-390

Fri, 25 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_job_open() return value A WARN_ON() returns a 0 or 1, not the original negative errno. Just drop the WARN_ON() as the FD open will pass the return code to userspace and there's only one possible source of the error (drm_sched_entity_init()).
Title accel: ethosu: Fix ethosu_job_open() return value
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T09:10:41.339Z

Reserved: 2026-09-25T10:18:58.201Z

Link: CVE-2026-97914

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-25T11:17:18.383

Modified: 2026-10-19T10:17:42.007

Link: CVE-2026-97914

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-25T00:00:00Z

Links: CVE-2026-97914 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T09:45:04Z

Weaknesses
  • CWE-393

    Return of Wrong Status Code