Denial of Service Vulnerability in Intel NPU Drivers

CVE-2026-20754

What is CVE-2026-20754?

Some Intel NPU Drivers contain a flaw due to improper conditions check within the device driver environment. This vulnerability permits an unprivileged software adversary, who has authenticated access, to execute a low-complexity attack that could lead to a denial of service. The attack can potentially occur via local access without special internal knowledge and does not require user interaction. The implications of this vulnerability may notably impact system availability, while the integrity and confidentiality remain largely unaffected.

References