Improper Control of Code Resources in Intel NPU Drivers Affecting User Applications
CVE-2025-26405
What is CVE-2025-26405?
The vulnerability pertains to improper management of dynamically-controlled code resources within Intel NPU Drivers, specifically affecting user applications. An attacker with authenticated access could leverage this vulnerability to initiate a denial of service attack. The exploit can occur locally, requiring minimal complexity from the adversary, along with passive user interaction. Despite not impacting data confidentiality or integrity, the availability of the affected system is at risk, leading to potential disruptions in service and system reliability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Intel(R) NPU Drivers See references
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved