The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of     NPU_SET_{IFM,OFM}_PRECISION select the activation storage mode on U85 only. On U65 the same field holds     the rounding mode, and the command stream parser has read it as a storage mode since the driver was added.
    That went unnoticed while unknown values fell through the switch, but now that they are rejected, every     U65 command stream that asks for natural rounding (2) fails CMDSTREAM_BO_CREATE with -EINVAL. Mesa emits     it for average pooling, concatenation, split, unpack, strided slice, LUT and argmax, which is 72 failures     of the Teflon test suite on an i.MX93. Truncating rounding (1) is misread as well: it picks the two-tile     address path and computes a bogus feature map size from tile bases the command stream never set. Read the     field as a storage mode only on the hardware where it is one. (CVE-2026-98143)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98143

high Nessus Plugin ID 350493

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Oct 2, 2026, 1:05 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021305
Version 1.2 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202609280804
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230