Denial of Service Risk in Intel NPU Drivers for User Applications

CVE-2025-26402

What is CVE-2025-26402?

A vulnerability exists in certain Intel NPU Drivers where a failure in protection mechanisms for User Applications can be exploited, leading to potential denial of service. This issue allows an unprivileged software attacker, who is already authenticated, to execute a low complexity attack. The attack is feasible via local access and does not necessitate special internal knowledge or user interaction. Consequently, this vulnerability may significantly affect the availability of the affected system.

References