CVE-2026-97914: accel: ethosu: Fix ethosu_job_open() return value
In the Linux kernel, the following vulnerability has been resolved:
accel: ethosu: Fix ethosujobopen() return value
A WARNON() returns a 0 or 1, not the original negative errno. Just drop the WARNON() as the FD open will pass the return code to userspace and there's only one possible source of the error (drmschedentityinit()).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Remove the WARN_ON() from accel: ethosu's ethosu_job_open() so the return code from drm_sched_entity_init() is passed through to userspace.
Event History
Frequently Asked Questions
What is the observable impact when the affected open path fails?
The failure can be returned as 0 or 1 because WARN_ON() does not preserve the original negative errno from drm_sched_entity_init(). This can cause the file-descriptor open path to report an incorrect result to userspace.
What is the source of the underlying error in this path?
The description identifies drm_sched_entity_init() as the only possible source of the error handled by ethosu_job_open().