PT-2025-46402 · Intel+1 · Intel(R) Npu Drivers+1

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-26402

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel(R) NPU Drivers (affected versions not specified)

Description A protection mechanism failure exists in some Intel(R) NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user and a low complexity attack may enable this denial of service. The issue may occur via local access when attack requirements are not present, without special internal knowledge, and requires no user interaction. The potential impact is high availability disruption, leading to subsequent system confidentiality, integrity, and availability impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-26402

Affected Products

Debian

Intel(R) Npu Drivers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26402 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-26402 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-26402 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html · Note
• https://twitter.com/CVEnew/status/1988303478947803546 · Twitter Post