Denial of Service Vulnerability in Intel NPU Drivers
CVE-2026-40705

6.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Npu Drivers
Vendor
CVE Published:
10 November 2026

What is CVE-2026-40705?

An improper resource locking issue exists in Intel NPU Drivers prior to version 32.0.100.4778, potentially enabling unauthenticated attackers to perform a denial of service. This vulnerability may be exploited through local access without requiring elevated privileges or user interaction. Although the confidentiality and integrity of the system remain unaffected, the availability is critically impacted, leading to service disruptions.

Affected Version(s)

Intel(R) NPU Drivers before version 32.0.100.4778

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.