Improper Control of Code Resources in Intel NPU Drivers Affecting User Applications

CVE-2025-26405

What is CVE-2025-26405?

The vulnerability pertains to improper management of dynamically-controlled code resources within Intel NPU Drivers, specifically affecting user applications. An attacker with authenticated access could leverage this vulnerability to initiate a denial of service attack. The exploit can occur locally, requiring minimal complexity from the adversary, along with passive user interaction. Despite not impacting data confidentiality or integrity, the availability of the affected system is at risk, leading to potential disruptions in service and system reliability.

References