Integer Underflow in Intel NPU Driver Software Affects User Applications

CVE-2026-40426

What is CVE-2026-40426?

An integer underflow vulnerability exists in the Intel NPU Driver software, impacting versions prior to 1.33.0. This vulnerability can enable unprivileged software adversaries with authenticated user access to launch low-complexity attacks resulting in denial of service. The flaw allows local access under certain conditions, without requiring extensive internal knowledge or user interaction. The potential ramifications include disruptions to the availability of the affected system, underscoring the importance of applying the necessary patches and updates as recommended by Intel.

References